146 matches found
CVE-2025-60492
A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60487
A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...
CVE-2025-60479
A NULL pointer dereference in the StatSFVec2f function /scenemanager/scenestats.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-4 file...
CVE-2025-60469
A NULL pointer dereference in the gfac4presentationchmode function /mediatools/avparsers.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2025-60491
A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60490
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60492
A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120606
A NULL pointer dereference in the dasher insert timeline entry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
PT-2026-120628
A segmentation violation in the gf isom get esd function /isomedia/isom read.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...
CVE-2025-60478
The GPAC Project/MP4Box software (versions before 2.5 ) is vulnerable to a use-after-free flaw located in the gf_filter_packet_destroy function within /filter_core/filter_pck.c. An attacker can exploit this vulnerability by supplying a crafted MPEG-2 file to cause a Denial of Service (DoS) . Whil...
CVE-2025-60479
The GPAC Project/MP4Box software, specifically versions prior to 2.5 , is vulnerable to a NULL pointer dereference within the StatSFVec2f function located in /scene_manager/scene_stats.c. This flaw allows an attacker to trigger a Denial of Service (DoS) condition by providing a crafted MPEG-4 fil...
CVE-2025-60491
A heap use-after-free vulnerability exists in the dasher_flush_segment function (located in /filters/dasher.c) of GPAC Project/MP4Box versions before 2.5 . This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a crafted MP4 file . While the vulnerability is documented as ...
CVE-2025-60497
The GPAC Project/MP4Box software, specifically versions prior to 2.5 , is vulnerable to a segmentation violation in the GetESD function located at /isomedia/track.c. An attacker can exploit this flaw by supplying a crafted MP4 file to cause a Denial of Service (DoS) . The vulnerability is categor...
CVE-2025-60492
A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
EUVD-2025-211162
A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-71438
An out-of-bounds read vulnerability exists in the gf_odf_ac4_cfg_dsi_v1 function (located in /odf/descriptors.c) of the GPAC Project/MP4Box software before version v26.07.0 . An attacker can exploit this flaw by providing a crafted AC4 file to trigger a Denial of Service (DoS) . While the vulnera...
CVE-2025-71438
An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
CVE-2025-71438
An out-of-bounds read in gfodfac4cfgdsiv1 /odf/descriptors.c in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
EUVD-2025-211159
A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...