https://github.com/gandalf4a/crash_report/blob/main/gpac/MP4Box/poc2/fpe_709

./MP4Box -dash 10000 poc

```
Description

2 FPE in MP4Box
Version

$ ./MP4Box -version
MP4Box - GPAC version 2.3-DEV-rev566-g50c2ab06f-master

Platform

$ uname -a
Linux user-GE40-2PC-Dragon-Eyes 6.2.0-33-generic #33~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep  7 10:33:52 UTC 2 x86_64 x86_64 x86_64 GNU/Linux

Reproduce

./MP4Box -dash 10000 poc

Credit

Gandalf4a

Impact

This vulnerability allows a remote attacker to cause a denial of service on an affected gpac MP4Box. Exploiting this vulnerability requires user interaction, as the target must access a malicious page or open a malicious file.
Occurrences

reframe_latm.c L268

FPE in /gpac/src/filters/reframe_latm.c:268:13 in latm_dmx_check_dur
poc

https://github.com/gandalf4a/crash_report/blob/main/gpac/MP4Box/poc2/fpe_268
asan

AddressSanitizer:DEADLYSIGNAL
=================================================================
==741504==ERROR: AddressSanitizer: FPE on unknown address 0x7f64f600508d (pc 0x7f64f600508d bp 0x7ffca36fc170 sp 0x7ffca36fbdc0 T0)
    #0 0x7f64f600508d in latm_dmx_check_dur /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:268:13
    #1 0x7f64f60024d0 in latm_dmx_check_pid /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:318:3
    #2 0x7f64f60024d0 in latm_dmx_process /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:545:3
    #3 0x7f64f5bafa33 in gf_filter_process_task /home/user/fuzzing_gpac/gpac/src/filter_core/filter.c:2971:7
    #4 0x7f64f5b7d47b in gf_fs_thread_proc /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2105:3
    #5 0x7f64f5b7b5cf in gf_fs_run /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2405:3
    #6 0x7f64f542ac6a in gf_dasher_process /home/user/fuzzing_gpac/gpac/src/media_tools/dash_segmenter.c:1236:6
    #7 0x55e9c82fd6dc in do_dash /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:4831:15
    #8 0x55e9c82eeb6e in mp4box_main /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:6245:7
    #9 0x7f64f4429d8f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #10 0x7f64f4429e3f in __libc_start_main csu/../csu/libc-start.c:392:3
    #11 0x55e9c8216dd4 in _start (/home/user/fuzzing_gpac/gpac/bin/gcc/MP4Box+0x82dd4) (BuildId: 53333ca7bff59dd9a3d1b2821e7c5f3a9aac76b9)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: FPE /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:268:13 in latm_dmx_check_dur
==741504==ABORTING

reframe_nalu.c L709

FPE in /gpac/src/filters/reframe_nalu.c:709:13 in naludmx_check_dur
poc

https://github.com/gandalf4a/crash_report/blob/main/gpac/MP4Box/poc2/fpe_709
asan

[31m[VVC] Error parsing NAL unit type 16
[0m[31m[VVC] Error parsing NAL unit type 29
[0m[31m[VVC] Error parsing NAL unit type 0
[0m[31m[VVC] Error parsing NAL unit type 15
[0m[31m[VVC] Error parsing Sequence Param Set
[0m[31m[VVC] wrong num tile rows 43 in PPS
[0mAddressSanitizer:DEADLYSIGNAL
=================================================================
==728272==ERROR: AddressSanitizer: FPE on unknown address 0x7fc7c5e5d5d5 (pc 0x7fc7c5e5d5d5 bp 0x7ffd88ccf210 sp 0x7ffd88ccef60 T0)
    #0 0x7fc7c5e5d5d5 in naludmx_check_dur /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:709:13
    #1 0x7fc7c5e64622 in naludmx_check_pid /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:1826:3
    #2 0x7fc7c5e52dc5 in naludmx_process /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:3370:4
    #3 0x7fc7c59afa33 in gf_filter_process_task /home/user/fuzzing_gpac/gpac/src/filter_core/filter.c:2971:7
    #4 0x7fc7c597d47b in gf_fs_thread_proc /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2105:3
    #5 0x7fc7c597b5cf in gf_fs_run /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2405:3
    #6 0x7fc7c522ac6a in gf_dasher_process /home/user/fuzzing_gpac/gpac/src/media_tools/dash_segmenter.c:1236:6
    #7 0x5647feba56dc in do_dash /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:4831:15
    #8 0x5647feb96b6e in mp4box_main /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:6245:7
    #9 0x7fc7c4229d8f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #10 0x7fc7c4229e3f in __libc_start_main csu/../csu/libc-start.c:392:3
    #11 0x5647feabedd4 in _start (/home/user/fuzzing_gpac/gpac/bin/gcc/MP4Box+0x82dd4) (BuildId: 53333ca7bff59dd9a3d1b2821e7c5f3a9aac76b9)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: FPE /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:709:13 in naludmx_check_dur
==728272==ABORTING


```
2 FPE in MP4Box
This is a GitHub Issue
repo:gpac
owner:gpac
Title : 2 FPE in MP4Box
Issue date:

--- start body ---
https://github.com/gandalf4a/crash_report/blob/main/gpac/MP4Box/poc2/fpe_709

./MP4Box -dash 10000 poc

```
Description

2 FPE in MP4Box
Version

$ ./MP4Box -version
MP4Box - GPAC version 2.3-DEV-rev566-g50c2ab06f-master

Platform

$ uname -a
Linux user-GE40-2PC-Dragon-Eyes 6.2.0-33-generic #33~22.04.1-Ubuntu SMP PREEMPT_DYNAMIC Thu Sep  7 10:33:52 UTC 2 x86_64 x86_64 x86_64 GNU/Linux

Reproduce

./MP4Box -dash 10000 poc

Credit

Gandalf4a

Impact

This vulnerability allows a remote attacker to cause a denial of service on an affected gpac MP4Box. Exploiting this vulnerability requires user interaction, as the target must access a malicious page or open a malicious file.
Occurrences

reframe_latm.c L268

FPE in /gpac/src/filters/reframe_latm.c:268:13 in latm_dmx_check_dur
poc

https://github.com/gandalf4a/crash_report/blob/main/gpac/MP4Box/poc2/fpe_268
asan

AddressSanitizer:DEADLYSIGNAL
=================================================================
==741504==ERROR: AddressSanitizer: FPE on unknown address 0x7f64f600508d (pc 0x7f64f600508d bp 0x7ffca36fc170 sp 0x7ffca36fbdc0 T0)
    #0 0x7f64f600508d in latm_dmx_check_dur /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:268:13
    #1 0x7f64f60024d0 in latm_dmx_check_pid /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:318:3
    #2 0x7f64f60024d0 in latm_dmx_process /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:545:3
    #3 0x7f64f5bafa33 in gf_filter_process_task /home/user/fuzzing_gpac/gpac/src/filter_core/filter.c:2971:7
    #4 0x7f64f5b7d47b in gf_fs_thread_proc /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2105:3
    #5 0x7f64f5b7b5cf in gf_fs_run /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2405:3
    #6 0x7f64f542ac6a in gf_dasher_process /home/user/fuzzing_gpac/gpac/src/media_tools/dash_segmenter.c:1236:6
    #7 0x55e9c82fd6dc in do_dash /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:4831:15
    #8 0x55e9c82eeb6e in mp4box_main /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:6245:7
    #9 0x7f64f4429d8f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #10 0x7f64f4429e3f in __libc_start_main csu/../csu/libc-start.c:392:3
    #11 0x55e9c8216dd4 in _start (/home/user/fuzzing_gpac/gpac/bin/gcc/MP4Box+0x82dd4) (BuildId: 53333ca7bff59dd9a3d1b2821e7c5f3a9aac76b9)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: FPE /home/user/fuzzing_gpac/gpac/src/filters/reframe_latm.c:268:13 in latm_dmx_check_dur
==741504==ABORTING

reframe_nalu.c L709

FPE in /gpac/src/filters/reframe_nalu.c:709:13 in naludmx_check_dur
poc

https://github.com/gandalf4a/crash_report/blob/main/gpac/MP4Box/poc2/fpe_709
asan

[31m[VVC] Error parsing NAL unit type 16
[0m[31m[VVC] Error parsing NAL unit type 29
[0m[31m[VVC] Error parsing NAL unit type 0
[0m[31m[VVC] Error parsing NAL unit type 15
[0m[31m[VVC] Error parsing Sequence Param Set
[0m[31m[VVC] wrong num tile rows 43 in PPS
[0mAddressSanitizer:DEADLYSIGNAL
=================================================================
==728272==ERROR: AddressSanitizer: FPE on unknown address 0x7fc7c5e5d5d5 (pc 0x7fc7c5e5d5d5 bp 0x7ffd88ccf210 sp 0x7ffd88ccef60 T0)
    #0 0x7fc7c5e5d5d5 in naludmx_check_dur /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:709:13
    #1 0x7fc7c5e64622 in naludmx_check_pid /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:1826:3
    #2 0x7fc7c5e52dc5 in naludmx_process /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:3370:4
    #3 0x7fc7c59afa33 in gf_filter_process_task /home/user/fuzzing_gpac/gpac/src/filter_core/filter.c:2971:7
    #4 0x7fc7c597d47b in gf_fs_thread_proc /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2105:3
    #5 0x7fc7c597b5cf in gf_fs_run /home/user/fuzzing_gpac/gpac/src/filter_core/filter_session.c:2405:3
    #6 0x7fc7c522ac6a in gf_dasher_process /home/user/fuzzing_gpac/gpac/src/media_tools/dash_segmenter.c:1236:6
    #7 0x5647feba56dc in do_dash /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:4831:15
    #8 0x5647feb96b6e in mp4box_main /home/user/fuzzing_gpac/gpac/applications/mp4box/mp4box.c:6245:7
    #9 0x7fc7c4229d8f in __libc_start_call_main csu/../sysdeps/nptl/libc_start_call_main.h:58:16
    #10 0x7fc7c4229e3f in __libc_start_main csu/../csu/libc-start.c:392:3
    #11 0x5647feabedd4 in _start (/home/user/fuzzing_gpac/gpac/bin/gcc/MP4Box+0x82dd4) (BuildId: 53333ca7bff59dd9a3d1b2821e7c5f3a9aac76b9)

AddressSanitizer can not provide additional info.
SUMMARY: AddressSanitizer: FPE /home/user/fuzzing_gpac/gpac/src/filters/reframe_nalu.c:709:13 in naludmx_check_dur
==728272==ABORTING


```
--- end body ---
