← Back

Gpac

gpac

Vendor: Gpac • 401 CVEs

CVEs (401)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gpac
1Gpac
Jun 17, 2026
Nov 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS)...Show more
MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.Show less
1Gpac
1Gpac
Jun 17, 2026
Nov 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data.
1Gpac
1Gpac
Jun 17, 2026
Nov 7, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV.
1Gpac
1Gpac
Jun 17, 2026
Nov 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42.
1Gpac
1Gpac
Jun 17, 2026
Nov 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box.
1Gpac
1Gpac
Jun 17, 2026
Nov 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box.
1Gpac
1Gpac
Jun 17, 2026
Nov 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14.
1Gpac
1Gpac
Jun 17, 2026
Oct 16, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV.
1Gpac
1Gpac
Jun 17, 2026
Oct 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV.
1Gpac
1Gpac
Jun 17, 2026
Oct 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c.
1Gpac
1Gpac
Jun 17, 2026
Oct 11, 2023
N/A· v4
7.7 HIGH· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2.
1Gpac
1Gpac
Jun 17, 2026
Oct 4, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV.
1Gpac
1Gpac
Jun 17, 2026
Sep 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c.
1Gpac
1Gpac
Jun 17, 2026
Sep 5, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Sep 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Sep 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Sep 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Sep 4, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Sep 1, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV.