998 matches found
CVE-2026-9567 GPAC MP4Box isom_intern.c MergeFragment null pointer dereference
A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isomintern.c of the component MP4Box. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the publ...
CVE-2026-9567
GPAC MP4Box (up to version 2.4.0) houses a vulnerability in isomedia/isom_intern.c: MergeFragment, where input handling can trigger a null pointer dereference. Exploitation is local, and a public PoC/exploit exists; this confirms practical risk under local access conditions. The patch is identifi...
CVE-2026-7135 GPAC MP4Box box_code_base.c elng_box_read out-of-bounds
A security flaw has been discovered in GPAC up to 26.03-DEV-rev105-g8f39a1eb3-master. Affected by this vulnerability is the function elngboxread of the file src/isomedia/boxcodebase.c of the component MP4Box. Performing a manipulation of the argument elng results in out-of-bounds read. The attack...
MP4Box Buffer Overflow
The vulnerability of the MP4Box packaging module of the GPAC multimedia platform is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...
CVE-2026-33144 GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing)
GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow write vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gfxmlparsebitsequencebs function in utils/xmlbincustom.c when processing a crafted NHML file containing malicious...
CVE-2026-4185
GPAC MP4Box swf_parse.c swf_def_bits_jpeg stack-based overflow in src/scene_manager/swf_parse.c (function swf_def_bits_jpeg) affects GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master. Manipulation of szName leads to a stack-based buffer overflow; remote exploit possible. Patch identified as 8961c74f87...
CVE-2021-41458
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...
CVE-2022-27145
GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...
CVE-2022-27146
GPAC mp4box 1.1.0-DEV-rev1759-geb2d1e6dd-has a heap-buffer-overflow vulnerability in function gfisomappleenumtag...
CVE-2022-27148
GPAC mp4box 1.1.0-DEV-rev1663-g881c6a94a-master is vulnerable to Integer Overflow...
MP4Box Heap Buffer Overflow DoS
The vulnerability of the gfisomgetesd function in the MP4Box utility of the GPAC multimedia platform is related to the pointer swapping between the null pointer and other pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
EUVD-2020-11392
Malware in sbrugna...
EUVD-2018-1838
Malware in sbrugna...
EUVD-2023-50263
Malicious code in bioql PyPI...
EUVD-2021-28098
Malicious code in bioql PyPI...
EUVD-2022-49865
Malicious code in bioql PyPI...
EUVD-2022-31682
Malicious code in bioql PyPI...
EUVD-2022-49864
Malicious code in bioql PyPI...