PT-2026-45418

A heap use-after-free in the dasher process function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

PT-2026-45419

A segmentation violation in the gf media get color info function /media tools/isom tools.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

PT-2026-45414

A heap buffer overflow in the m2tsdmx send packet function filters/dmx m2ts.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60485

A segmentation violation in the gfisomapplesettagex function /isomedia/isomwrite.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60485

Removed by vendor...

CVE-2025-60483

Removed by vendor...

CVE-2025-60481

Removed by vendor...

CVE-2025-60495

Removed by vendor...

CVE-2025-60486

Removed by vendor...

CVE-2025-55664

Removed by vendor...

CVE-2025-60495

The GPAC Project/MP4Box multimedia packager (versions before 26.02.0 ) is vulnerable to a segmentation violation in the gf_media_get_color_info function located in /media_tools/isom_tools.c. This issue stems from improper pointer manipulation , which can be exploited by an attacker to cause a Den...

gpac:fuzz_scene: Heap-use-after-free in lsr_restore_base

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4744197159845888 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x789a1a4ef8f0 Crash...

CVE-2025-70116

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields e.g., codec/mime/profile strings. gfmediamapesd then calls strlen on a NULL pointer, triggering a crash ASan SEGV...

gpac:fuzz_scene: Heap-use-after-free in gf_laser_decoder_del

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5611023758589952 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x790f3bfe00a0 Crash...

CVE-2026-9572

A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function MediaGetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of the argument cat leads to memory leak. The attack can only be performed from a local environment. Th...

DEBIAN-CVE-2025-70116

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields e.g., codec/mime/profile strings. gfmediamapesd then calls strlen on a NULL pointer, triggering a crash ASan SEGV...

UBUNTU-CVE-2025-70116

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields e.g., codec/mime/profile strings. gfmediamapesd then calls strlen on a NULL pointer, triggering a crash ASan SEGV...

CVE-2025-70116

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields e.g., codec/mime/profile strings. gfmediamapesd then calls strlen on a NULL pointer, triggering a crash ASan SEGV...

CVE-2025-70116

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields e.g., codec/mime/profile strings. gfmediamapesd then calls strlen on a NULL pointer, triggering a crash ASan SEGV...

CVE-2025-70116

The GPAC MP4Box software is susceptible to a NULL pointer dereference when processing specific truncated MP4 files . The issue arises when an unknown or invalid stsd entry results in missing descriptor fields, such as codec, mime, or profile strings. Specifically, the gf_media_map_esd() function ...