621 matches found
CVE-2025-70302
A heap overflow in the ghidmxdeclareopidbin function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted input...
Linux Distros Unpatched Vulnerability : CVE-2025-70304
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet. CVE-2025-70304...
CVE-2025-70304
GPAC v2.4.0 contains a buffer overflow in vobsub_get_subpic_duration() due to insufficient validation of input data length, allowing a crafted packet to trigger a DoS. The issue is documented across multiple databases (CNVD, OSV, CVE catalogs) with the same description. A PoC appears to be publis...
Linux Distros Unpatched Vulnerability : CVE-2025-70307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet. CVE-2025-70307 Note that...
CVE-2021-33361
Memory leak in the afraboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...
CVE-2021-31262
The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-31259
The gfisomcencgetdefaultinfointernal function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2021-31260
The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
CVE-2019-20168
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...
CVE-2019-20161
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGFIPMPXWatermarkingInit in odf/ipmpxcode.c...
CVE-2019-20165
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilstitemRead in isomedia/boxcodeapple.c...
CVE-2019-12482
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function gfisomgetoriginalformattype at isomedia/drmsample.c in libgpac.a, as demonstrated by MP4Box...
CVE-2019-12483
An issue was discovered in GPAC 0.7.1. There is a heap-based buffer overflow in the function ReadGFIPMPXRemoveToolNotificationListener in odf/ipmpxcode.c in libgpac.a, as demonstrated by MP4Box...
PT-2026-25559
Name of the Vulnerable Software and Affected Versions GPAC versions up to 2.5-DEV-rev2167-gcc9d617c0-master Description A flaw exists in GPAC that involves a stack-based buffer overflow within the swf def bits jpeg function, located in the src/scene manager/swf parse.c file of the MP4Box componen...
EUVD-2018-13539
Malware in sbrugna...
EUVD-2019-4078
Malware in sbrugna...
EUVD-2018-13303
Malware in sbrugna...