Gpac vulnerabilities

Products

• Gpac 401
• Gpac/gpac 47
• Mp4box 4

Newest

• gpac An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26... CVE-2026-79522 6.5 MediumSeptember 9, 2026
• gpac An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows... CVE-2026-79514 6.5 MediumSeptember 9, 2026
• gpac A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools... CVE-2026-79513 6.5 MediumSeptember 9, 2026
• gpac A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC... CVE-2025-60465 6.1 MediumJune 25, 2026
• gpac A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC... CVE-2025-60464 7.8 HighJune 25, 2026
• gpac A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project... CVE-2025-60474 7.5 HighJune 24, 2026
• gpac A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c)... CVE-2025-60473 5.5 MediumJune 24, 2026
• gpac A use-after-free in the gf_filter_pid_reconfigure_task_discard function (/filter_core/filter_pid... CVE-2025-60471 5.5 MediumJune 24, 2026
• gpac GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is... CVE-2025-60468 5.5 MediumJune 24, 2026
• gpac A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c)... CVE-2025-60467 7.5 HighJune 24, 2026
• gpac A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC... CVE-2025-60466 5.0 MediumJune 24, 2026
• gpac GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the... CVE-2025-55639 6.5 MediumJune 23, 2026
• gpac A segmentation violation in the Track_SetStreamDescriptor function (isomedia/track.c) of GPAC... CVE-2025-55663 5.5 MediumJune 15, 2026
• gpac A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows... CVE-2025-55661 5.5 MediumJune 15, 2026
• gpac A stack overflow in the gf_opus_read_length function (media_tools/av_parsers.c) of GPAC MP4Box v2... CVE-2025-55660 5.5 MediumJune 15, 2026
• gpac A heap buffer overflow in the gf_isom_vp_config_new function (isomedia/avc_ext.c) of GPAC MP4Box... CVE-2025-55652 5.5 MediumJune 15, 2026
• gpac A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC... CVE-2025-55650 5.5 MediumJune 15, 2026
• gpac A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC... CVE-2025-55649 5.5 MediumJune 15, 2026
• gpac A heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of... CVE-2025-55648 5.5 MediumJune 15, 2026
• gpac An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2... CVE-2025-55647 5.5 MediumJune 15, 2026
• gpac A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2... CVE-2025-55645 5.5 MediumJune 15, 2026
• gpac A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC... CVE-2025-55644 5.5 MediumJune 15, 2026
• gpac A NULL pointer dereference in the TrackWriter handling component (filters/mux_isom.c) of GPAC... CVE-2025-55643 5.5 MediumJune 15, 2026
• gpac GPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmx_process... CVE-2025-55642 6.5 MediumJune 15, 2026
• gpac A NULL pointer dereference in the gf_isom_copy_sample_info function (isomedia/isom_write.c) of... CVE-2025-55641 5.5 MediumJune 15, 2026
• gpac A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC... CVE-2025-55659 6.5 MediumJune 9, 2026
• gpac GPAC MP4Box v2.4 was discovered to contain a floating point exception in the... CVE-2025-55658 6.5 MediumJune 9, 2026
• gpac A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC... CVE-2025-55657 7.5 HighJune 9, 2026
• gpac A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of... CVE-2025-55651 5.5 MediumJune 9, 2026
• gpac A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c)... CVE-2025-52293 7.5 HighJune 9, 2026
• gpac A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows... CVE-2025-52292 7.5 HighJune 9, 2026
• gpac GPAC MP4Box media.c Media_GetSample memory leak CVE-2026-9572 4.8 MediumMay 26, 2026
• gpac GPAC box_code_base.c sidx_box_read allocation of resources CVE-2026-8124 4.8 MediumMay 8, 2026
• gpac Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702... CVE-2026-39103 5.5 MediumMay 5, 2026
• gpac GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing) CVE-2026-33144 5.8 MediumMarch 20, 2026
• gpac GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow CVE-2026-27821 7.7 HighFebruary 26, 2026
• gpac GPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds write CVE-2026-1418 4.8 MediumJanuary 26, 2026
• gpac GPAC filedump.c dump_isom_rtp null pointer dereference CVE-2026-1417 4.8 MediumJanuary 26, 2026
• gpac GPAC filedump.c DumpMovieInfo null pointer dereference CVE-2026-1416 4.8 MediumJanuary 26, 2026
• gpac GPAC media_export.c gf_media_export_webvtt_metadata null pointer dereference CVE-2026-1415 4.8 MediumJanuary 26, 2026
• gpac A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a... CVE-2025-70310 5.5 MediumJanuary 15, 2026
• gpac A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause... CVE-2025-70309 5.5 MediumJanuary 15, 2026
• gpac An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to... CVE-2025-70308 7.5 HighJanuary 15, 2026
• gpac A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a... CVE-2025-70307 7.5 HighJanuary 15, 2026
• gpac A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of... CVE-2025-70305 5.5 MediumJanuary 15, 2026
• gpac A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to... CVE-2025-70304 7.5 HighJanuary 15, 2026
• gpac A heap overflow in the uncv_parse_config() function of GPAC v2.4.0 allows attackers to cause a... CVE-2025-70303 5.5 MediumJanuary 15, 2026
• gpac A heap overflow in the ghi_dmx_declare_opid_bin() function of GPAC v2.4.0 allows attackers to... CVE-2025-70302 5.5 MediumJanuary 15, 2026
• gpac A heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a... CVE-2025-70299 6.5 MediumJanuary 15, 2026
• gpac GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function. CVE-2025-70298 8.2 HighJanuary 15, 2026
• Show olderLoading…