ROS-20260911-73-0004

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0012

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0010

The vulnerability of the gfnodelistgetchild function in the MP4Box utility of the GPAC multimedia platform, which relates to reading beyond the buffer during processing an incorrect XMT scene, allows a malicious actor to cause service failure...

ROS-20260910-73-0127

The vulnerability of the JSScriptLoadVRML function in the MP4Box utility of the GPAC multimedia platform, which stems from handling an incorrect XMT scene by swapping the zero pointer, allows a malicious actor to cause a service failure...

ROS-20260910-73-0148

The vulnerability of the envtestevaluate function in the MP4Box utility of the GPAC multimedia platform, which relates to the assignment of a null pointer during processing of an incorrect XMT scene, allows a malicious actor to trigger a service failure...

ROS-20260910-73-0145

The vulnerability of the gfsgcommandapply function in the MP4Box utility of the GPAC multimedia platform, which relates to the handling of incorrect XMT scenes by resetting the null pointer, allows a violator to trigger a service failure...

ROS-20260910-73-0165

The vulnerability of the compositormpeg4getSensorHandlerEx function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of using a null pointer during processing of incorrect XMT scenes, allows a malicious actor to cause service failure...

ROS-20260910-73-0125

The vulnerability of the gfnodeunregister function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after deallocation when processing an incorrect XMT scene, allows a hacker to cause a service failure...

ROS-20260910-73-0161

The vulnerability of the gfsgdel function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure by exploiting memory issues after it is released during the processing of an incorrect XMT scene...

ROS-20260910-73-0162

The vulnerability of the gfsgcommandnew function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260910-73-0164

The vulnerability of the envtestevaluate function in the MP4Box utility of the GPAC multimedia platform, which relates to the assignment of a null pointer during processing of an incorrect XMT scene, allows a malicious actor to trigger a service failure...

ROS-20260910-73-0168

The vulnerability of the gfxmlsaxpeeknode function in the MP4Box utility of the GPAC multimedia platform, which is related to buffer overflows in dynamic memory during processing of incorrect XMT scenes, allows a hacker to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the avidmxprocess function in the filters/dmxavi.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-15185

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executin...

CVE-2026-15185

A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...

CVE-2026-15185 GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds

A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...

CVE-2025-15668

GPAC MP4Box contains a heap-based overflow in sgpd_del_entry (src/isomedia/box_code_base.c). Local access is required. The exploit is publicly available; a patch is identified as f29f955f2a3b5e8e507caad3e52319f961bf37bf. Affected version range is GPAC up to b40ce70f5. Remediation is to apply the ...

CVE-2025-15667 GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free

A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gfisomnalusamplerewrite of the file src/isomedia/avcext.c of the component MP4Box. This manipulation of the argument naluoutbs causes double free. It is possible to launch the attack on the local host. T...

CVE-2025-15667

GPAC MP4Box contains a vulnerability in gf_isom_nalu_sample_rewrite (src/isomedia/avc_ext.c) that can cause a double free. The issue affects GPAC up to 2.5-DEV and enables a local-attack where an attacker manipulates nalu_out_bs. Public exploit details exist. A patch named f29f955f2a3b5e8e507caad...

Linux Distros Unpatched Vulnerability : CVE-2025-60466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the gffilterpidgetpacket function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Servic...