425 matches found
CVE-2026-9567
A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isomintern.c of the component MP4Box. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the publ...
EUVD-2026-31945
A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isomintern.c of the component MP4Box. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the publ...
CVE-2026-39103
Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the src/scenegraph/svgattributes.c, svgparsestrings, gfsvgparseattribute...
EUVD-2026-12241
A vulnerability was found in GPAC up to 2.5-DEV-rev2167-gcc9d617c0-master. This vulnerability affects the function swfdefbitsjpeg of the file src/scenemanager/swfparse.c of the component MP4Box. The manipulation of the argument szName results in stack-based buffer overflow. It is possible to laun...
UBUNTU-CVE-2026-4015
A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtinprocesstexml of the file src/filters/loadtext.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit...
GPAC 缓冲区错误漏洞
GPAC is an open-source multimedia framework developed by GPAC. The GPAC 26.03-DEV version contains a buffer error vulnerability, which stems from an out-of-bounds write operation in the function svinprocess of the SVG Parser component’s src/filters/loadsvg.c file...
CVE-2025-70308
An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...
CVE-2025-70309
A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...
Linux Distros Unpatched Vulnerability : CVE-2025-70303
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file. CVE-2025-70303 Note tha...
CVE-2025-70310
A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...
CVE-2025-70298
The GPAC multimedia framework version v2.4.0 is vulnerable to an out-of-bounds read in the oggdmx_parse_tags function. The vulnerability stems from a failure to properly validate the input data's length size, which allows an attacker to read data beyond the buffer boundaries in memory. This flaw ...
CVE-2025-70310
The GPAC multimedia framework (specifically v2.4.0 ) contains a heap overflow vulnerability in the vorbis_to_intern() function. The root cause is a failure to correctly validate the length and size of input data, which can be exploited by an attacker using a crafted .ogg file to trigger a Denial ...
CVE-2025-70309
The open source multimedia framework GPAC v2.4.0 is vulnerable to a stack buffer overflow in the pcmreframe_flush_packet function. The root cause is the function's failure to properly validate the length and size of the input data . An attacker can exploit this by providing a crafted WAV file to ...
CVE-2025-70308
The GPAC open source multimedia framework is vulnerable to an out-of-bounds read in the GSF demuxer filter (gsfdmx) component. The root cause is a failure to properly validate the length size of input data during .gsf file processing. An attacker can exploit this vulnerability using a crafted fil...
CVE-2025-70307
A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2023-4683
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV...
EUVD-2021-9032
Malicious code in bioql PyPI...
EUVD-2021-9030
Malicious code in bioql PyPI...