← Back

Gpac

gpac

402 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Gpac
gpac
Mp4box
mp4box

CVEs (402)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gpac
1Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function senc_Parse() in isomedia/box_code_drm.c.
1Gpac
1Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_dump() in isomedia/box_dump.c.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/box_code_apple.c.
1Gpac
1Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia/box_funcs.c.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.
1Gpac
1Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in media_tools/av_parsers.c.
1Gpac
1Gpac
Jun 17, 2026
Dec 31, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c.
1Gpac
1Gpac
Nov 21, 2024
Sep 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
GPAC 0.7.1 has a memory leak in dinf_Read in isomedia/box_code_base.c.
2Debian
Gpac
2Debian Linux
Gpac
Nov 21, 2024
Sep 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
audio_sample_entry_AddBox() at isomedia/box_code_base.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted file.
2Debian
Gpac
2Debian Linux
Gpac
Nov 21, 2024
Sep 16, 2019
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication =...Show more
AVC_DuplicateConfig() at isomedia/avc_ext.c in GPAC 0.7.1 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a crafted file. There is "cfg_new->AVCLevelIndication = cfg->AVCLevelIndication;" but cfg could be NULL.Show less
1Gpac
1Gpac
Jun 17, 2026
Jul 16, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In GPAC before 0.8.0, isomedia/isom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools/mpegts.c.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
May 30, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGF_IPMPX_RemoveToolNotificationListener in odf/ipmpx_code.c in libgpac.a, as demonstrated by MP4Box.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
May 30, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gf_isom_get_original_format_type at isomedia/drm_sample.c in libgpac.a, as demonstrated by MP4Box.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
May 30, 2019
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Apr 15, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
gf_bin128_parse in utils/os_divers.c in GPAC 0.7.1 has a buffer overflow issue for the crypt feature when encountering a crafted_drm_file.xml file.
2Debian
Gpac
2Debian Linux
Gpac
Jun 17, 2026
Apr 15, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
GPAC 0.7.1 has a buffer overflow issue in gf_import_message() in media_import.c.
3Canonical
DebianGpac
3Debian Linux
GpacUbuntu Linux
Nov 21, 2024
Feb 6, 2019
N/A· v4
7.8 HIGH· v3
6.8 MEDIUM· v2
In GPAC 0.7.1 and earlier, gf_text_get_utf8_line in media_tools/text_import.c in libgpac_static.a allows an out-of-bounds write because a certain -1 return value is mishandled.
3Canonical
DebianGpac
3Debian Linux
GpacUbuntu Linux
Nov 21, 2024
Jun 29, 2018
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia/box_dump.c function hdlr_dump.