gpac Vulnerability Advisory Catalog

Total 398 security vulnerabilities recorded for gpac software and firmware.

← Back to All Vendors
Component: gpac

A NULL pointer dereference in the gf_odf_vvc_cfg_write_bs function (odf/descriptors.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Servi...

📅 2026-06-09
CVSS 7.5 Dossier →
Component: gpac

A NULL pointer dereference in the gf_isom_get_user_data_count function (isomedia/isom_read.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial o...

📅 2026-06-09
CVSS 5.5 Dossier →
Component: gpac

A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial...

📅 2026-06-09
CVSS 7.5 Dossier →
Component: gpac

A stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplyi...

📅 2026-06-09
CVSS 7.5 Dossier →
Component: gpac

A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media....

📅 2026-05-26
CVSS 3.3 Dossier →
Component: gpac

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file src/isomedia/box_code_base.c. Th...

📅 2026-05-08
CVSS 3.3 Dossier →
Component: gpac

Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the ...

📅 2026-05-05
CVSS 5.5 Dossier →
Component: gpac

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow (write) vulnerability was discovered in GPAC MP4Box...

📅 2026-03-20
CVSS 5.8 Dossier →
Component: gpac

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in `src/...

📅 2026-02-26
CVSS 7.8 Dossier →
CVE-2026-1418 MEDIUM
Component: gpac

A security vulnerability has been detected in GPAC up to 2.4.0. This affects the function gf_text_import_srt_bifs of the file src/scene_manager/text_t...

📅 2026-01-26
CVSS 5.3 Dossier →
Component: gpac

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. T...

📅 2026-01-26
CVSS 3.3 Dossier →
Component: gpac

A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/...

📅 2026-01-26
CVSS 3.3 Dossier →
Component: gpac

A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gf_media_export_webvtt_metadata of the file src/media_tools/media_export....

📅 2026-01-26
CVSS 3.3 Dossier →
Component: gpac

A heap overflow in the uncv_parse_config() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file....

📅 2026-01-15
CVSS 5.5 Dossier →
Component: gpac

A heap overflow in the ghi_dmx_declare_opid_bin() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted input....

📅 2026-01-15
CVSS 5.5 Dossier →
Component: gpac

A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet....

📅 2026-01-15
CVSS 7.5 Dossier →
Component: gpac

A heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file....

📅 2026-01-15
CVSS 6.5 Dossier →
Component: gpac

A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .ogg file....

📅 2026-01-15
CVSS 5.5 Dossier →
Component: gpac

A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file....

📅 2026-01-15
CVSS 5.5 Dossier →
Component: gpac

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .gsf file....

📅 2026-01-15
CVSS 7.5 Dossier →
Component: gpac

A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file....

📅 2026-01-15
CVSS 5.5 Dossier →
Component: gpac

A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet...

📅 2026-01-15
CVSS 7.5 Dossier →
Component: gpac

GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function....

📅 2026-01-15
CVSS 8.2 Dossier →
CVE-2025-7797 MEDIUM
Component: gpac

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf_dash_download_init_segment of...

📅 2025-07-18
CVSS 5.3 Dossier →
Page 2 of 17 (398 Total Records)