CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an at...

Linux Distros Unpatched Vulnerability : CVE-2026-79522

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a...

UBUNTU-CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an at...

Linux Distros Unpatched Vulnerability : CVE-2026-71614

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c,...

Linux Distros Unpatched Vulnerability : CVE-2026-79513

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of...

ROS-20260910-73-0142

The vulnerability of the composerlayoutmodified function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of handling incorrect XMT scenes by resetting the null pointer, allows a malicious actor to trigger a service failure...

CVE-2026-79514

An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79522

An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-71613

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdecprocess function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859...

CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

CVE-2026-79513

A divide-by-zero vulnerability in the gfdashgettimelineduration function src/mediatools/dashclient.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79513

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows an attacker to trigger a Denial of Service by supplying a crafted MPD SegmentTimeline. The CVSS 3.1 score is 6.5 (Medium) with a network attack vector, low complexi...

PT-2026-89146

A divide-by-zero vulnerability in the gf dash get timeline duration function src/media tools/dash client.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-71614

An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/mediatools/dvbmpe.c, descriptorTimeslicefecidentifier and gfm2tsipdatagramreader components. Fixed in 0e4093392e1f847c90d20e031e893cd942fef938...

CVE-2026-79522

An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-79514

CVE-2026-79514 is an out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 . An attacker can trigger a Denial of Service by sending a crafted HTTP request. The CVSS 3.1 score is 6.5 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H, indicating a network-rea...

CVE-2026-79522

An out-of-bounds read in the gfdmgetchunkdata function src/utils/downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...

CVE-2026-71616

CVE-2026-71616 is a denial of service vulnerability in the GPAC multimedia framework. The flaw resides in the gf_route_media_complete_object() function, as of commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3. An attacker can trigger a DoS by calling this function. The issue is fixed in commit 3c4e...

EUVD-2026-75166

An out-of-bounds read in the gfdmdatareceived function downloader.c of GPAC v26.07.0 allows attackers to cause a Denial of Service DoS via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640...