How many CVEs have a located fix in debian/gpac?

32 published CVEs have a fix traced to functions in debian/gpac, touching 72 functions across 40 files.

Which function in debian/gpac has been patched by the most CVEs?

nhmldmx_send_sample in src/filters/dmx_nhml.c has been changed by 3 CVE fixes, from 2021 to 2021.

How large is a typical CVE fix in debian/gpac?

The median fix changes 7 lines. 78% of fixes change 20 lines or fewer, and 56% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

c

#141 of 500 repositories

debian/gpac

Name: debian/gpac: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix March 17, 2023

32

CVE fixes located

Published CVEs

72

Functions patched

Distinct function sites

40

Files patched

Distinct source files

2021–2023

Years covered

By CVE publication date

Overview

32 published CVEs have a fix traced to functions in debian/gpac, the earliest published in 2021. Those fixes changed 72 distinct functions across 40 files, in 106 patch hunks.

Among the 500 repositories tracked here, debian/gpac ranks #141 by the number of CVEs with a located fix.

Most patched functions

Functions in debian/gpac changed by the most CVE fixes.

Most patched files

Files in debian/gpac changed by the most CVE fixes.

1src/scene_manager/scene_dump.c4 CVEs · 5 functions
2src/filters/dmx_nhml.c3 CVEs · 3 functions
3src/laser/lsr_dec.c3 CVEs · 3 functions
4src/bifs/field_decode.c2 CVEs · 3 functions
5src/scenegraph/svg_attributes.c2 CVEs · 3 functions
6src/isomedia/isom_write.c2 CVEs · 2 functions
7src/media_tools/media_export.c2 CVEs · 2 functions
8src/scene_manager/loader_svg.c2 CVEs · 2 functions
9src/bifs/com_dec.c2 CVEs · 1 functions
10src/isomedia/isom_store.c2 CVEs · 1 functions

Fix size

How much code a CVE fix in debian/gpac changes, with backports counted once.

7

Median lines changed

Added plus removed, per CVE

78%

Fixes of 20 lines or fewer

Share of CVE fixes

56%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in debian/gpac, and the functions each fix changed.

GPAC load_text.c buffer overflow
CVE-2023-1452gf_text_get_utf8_line
High · CVSS 7.8
EPSS 0.4%2023-03-17
CVE-2023-1449
CVE-2023-1449av1dmx_parse_av1 av1dmx_parse_flush_sample
High · CVSS 7.8
EPSS 0.4%2023-03-17
CVE-2023-1448
CVE-2023-1448gf_m2ts_process_sdt
High · CVSS 7.8
EPSS 0.4%2023-03-17
CVE-2022-45283
CVE-2022-45283smil_parse_time_list
High · CVSS 7.8
EPSS 0.4%2022-12-05
CVE-2021-40944
CVE-2021-40944gf_fs_load_filter
Medium · CVSS 5.5
EPSS 0.6%2022-06-28
CVE-2022-29537
CVE-2022-29537gp_rtp_builder_do_avc gp_rtp_builder_do_hevc
Medium · CVSS 5.5
EPSS 0.6%2022-04-20
CVE-2022-24577
CVE-2022-24577stbl_box_read iods_box_read gf_isom_remove_track
High · CVSS 7.8
EPSS 1.2%2022-03-14
CVE-2022-24574
CVE-2022-24574gf_dump_vrml_proto_field gf_dump_vrml_field isor_reader_get_sample
Medium · CVSS 5.5
EPSS 0.8%2022-03-14
CVE-2022-24578
CVE-2022-24578SFS_AddString
High · CVSS 7.8
EPSS 1.0%2022-03-14
CVE-2022-26967
CVE-2022-26967gf_media_export_webvtt_metadata js_sys_basecode_ex svg_process_media_href
High · CVSS 7.8
EPSS 1.0%2022-03-12
CVE-2021-45767
CVE-2021-45767lsr_read_paint
Medium · CVSS 5.5
EPSS 0.7%2022-01-14
CVE-2021-45762
CVE-2021-45762gf_bifs_dec_field BD_DecFieldReplace gf_sg_vrml_mf_reset
Medium · CVSS 5.5
EPSS 0.7%2022-01-14

Get an alert for each new debian/gpac CVE, with the patched functions and AI-written analysis.

Monitor gpac CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

debian/w3m32 CVEs FlowiseAI/Flowise32 CVEs nodejs/undici32 CVEs Piwigo/Piwigo32 CVEs star7th/showdoc32 CVEs usememos/memos32 CVEs debian/libskia33 CVEs mruby/mruby33 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in debian/gpac.

How many CVEs have a located fix in debian/gpac?: 32 published CVEs have a fix traced to functions in debian/gpac, touching 72 functions across 40 files.
Which function in debian/gpac has been patched by the most CVEs?: nhmldmx_send_sample in src/filters/dmx_nhml.c has been changed by 3 CVE fixes, from 2021 to 2021.
How large is a typical CVE fix in debian/gpac?: The median fix changes 7 lines. 78% of fixes change 20 lines or fewer, and 56% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track debian/gpac CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing