← Back

Gpac

gpac

402 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Gpac
gpac
Mp4box
mp4box

CVEs (402)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Gpac
1Gpac
Jun 17, 2026
Mar 9, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file...Show more
Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) via gf_fwrite component in at utils/os_file.c.Show less
1Gpac
1Gpac
Jun 17, 2026
Feb 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.
1Gpac
1Gpac
Jun 17, 2026
Feb 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
gpac v2.2.1 was discovered to contain a Use-After-Free (UAF) vulnerability via the dasher_configure_pid function at /src/filters/dasher.c.
1Gpac
1Gpac
Jun 17, 2026
Feb 5, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
gpac v2.2.1 was discovered to contain a memory leak via the dst_props variable in the gf_filter_pid_merge_properties_internal function.
1Gpac
1Gpac
Jun 17, 2026
Jan 25, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577
1Gpac
1Gpac
Jun 17, 2026
Jan 10, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS)...Show more
MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.Show less
1Gpac
1Gpac
Jun 17, 2026
Jan 8, 2024
N/A· v4
9.1 CRITICAL· v3
N/A· v2
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Jan 8, 2024
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV.
1Gpac
1Gpac
Jun 17, 2026
Jan 3, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue discovered in GPAC 2.3-DEV-rev605-gfc9e29089-master in MP4Box in gf_avc_change_vui /afltest/gpac/src/media_tools/av_parsers.c:6872:55 allows attackers to crash the application.
1Gpac
1Gpac
Jun 17, 2026
Dec 9, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DoS) via str2ulong class in src/media_tools/avilib.c in gpac/...Show more
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DoS) via str2ulong class in src/media_tools/avilib.c in gpac/MP4Box.Show less
1Gpac
1Gpac
Jun 17, 2026
Dec 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c.
1Gpac
1Gpac
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589.
1Gpac
1Gpac
Jun 17, 2026
Dec 7, 2023
N/A· v4
5.3 MEDIUM· v3
N/A· v2
GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300. This vulnerability may lead to a denial of service.
1Gpac
1Gpac
Jun 17, 2026
Nov 20, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329.
1Gpac
1Gpac
Jun 17, 2026
Nov 20, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75.
1Gpac
1Gpac
Jun 17, 2026
Nov 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 15, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c.
1Gpac
1Gpac
Jun 17, 2026
Nov 14, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS)...Show more
MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.Show less
1Gpac
1Gpac
Jun 17, 2026
Nov 7, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data.