← Back

Gpac

gpac

Vendor: Gpac • 398 CVEs

CVEs (398)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is contains an Integer overflow vulnerability in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8316
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow.
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c.
1Gpac
1Gpac
Jun 17, 2026
Jan 5, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c.
1Gpac
1Gpac
Jun 17, 2026
Dec 6, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 29, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 29, 2022
N/A· v4
8.8 HIGH· v3
N/A· v2
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the file laser/lsr_dec.c. The manipulation leads to integer overf...Show more
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the file laser/lsr_dec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908. It is recommended to apply a patch to fix this issue. VDB-214518 is the identifier assigned to this vulnerability.Show less
1Gpac
1Gpac
Jun 17, 2026
Nov 29, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 29, 2022
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 11, 2022
N/A· v4
6.5 MEDIUM· v3
N/A· v2
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulat...Show more
A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.Show less
1Gpac
1Gpac
Jun 17, 2026
Nov 2, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c.