7521 matches found
CVE-2026-1415: NULL Pointer Dereference
A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gfmediaexportwebvttmetadata of the file src/mediatools/mediaexport.c. The manipulation of the argument Name leads to null pointer dereference. The attack must be carried out locally. The exploit is publicly available and...
CVE-2026-1418: Out-of-bounds Write
A security vulnerability has been detected in GPAC up to 2.4.0. This affects the function gftextimportsrtbifs of the file src/scenemanager/texttobifs.c of the component SRT Subtitle Import. Such manipulation leads to out-of-bounds write. The attack needs to be performed locally. The exploit has...
GPAC code-related vulnerabilities
GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 2.4.0 have code vulnerabilities. These vulnerabilities stem from incorrect handling of parameters in the Name field in the src/mediatools/mediaexport.c file, which may lead to null pointer dereferencing...
Linux Distros Unpatched Vulnerability : CVE-2026-1417
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dumpisomrtp of the file applications/mp4box/filedump.c. This...
gpac:fuzz_probe_analyze: Heap-buffer-overflow in img_process
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6553516150947840 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x76a5dbbf4c8c Crash State:...
GPAC avi_parse_input_file function heap buffer overflow vulnerability
GPAC is an open source multimedia framework. GPAC has a heap buffer overflow vulnerability that stems from the aviparseinputfile function failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of service...
GPAC Stack Buffer Overflow Vulnerability
GPAC is an open source multimedia framework. GPAC suffers from a stack buffer overflow vulnerability that stems from the dmxsaf function failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...
GPAC vorbis_to_intern function stack buffer overflow vulnerability
GPAC is an open source multimedia framework. GPAC suffers from a stack buffer overflow vulnerability that stems from the vorbistointern function failing to correctly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of service...
The vulnerability of the dump_ttxt_sample() function on the multimedia platform GPAC allows a hacker to trigger a service failure.
The vulnerability of the dumpttxtsample function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...
The vulnerability of the oggdmx_parse_tags() function on the GPAC multimedia platform allows a perpetrator to trigger a service failure.
The vulnerability of the oggdmxparsetags function on the GPAC multimedia platform is related to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
The vulnerability of the GSF demuxer filter (gsfdmx) component of the GPAC multimedia platform, which allows a hacker to cause a service failure.
The vulnerability of the GSF demuxer filter gsfdmx in the GPAC multimedia platform involves reading beyond the buffer boundaries in memory during GSF file processing. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the ghi_dmx Declare_Opid_Bin() function on the multimedia platform GPAC, which allows a hacker to execute arbitrary code or cause service failures.
The vulnerability of the ghidmx Declareopidbin function on the GPAC multimedia platform is related to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...
The vulnerability of the avi_parse_input_file() function on the GPAC multimedia platform allows a hacker to trigger a service failure.
The vulnerability of the aviparseinputfile function on the GPAC multimedia platform is related to the output of the operation beyond the buffer boundaries in memory when processing avi format files. Exploiting this vulnerability can allow a malicious actor to cause service failures...
The vulnerability of the vobsub_get_subpic_duration() function on the GPAC multimedia platform allows a hacker to trigger a service failure.
The vulnerability of the vobsubgetsubpicduration function on the GPAC multimedia platform is related to the execution of operations outside the buffer in memory when processing SUB-files. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...
GPAC uncv_parse_config function stack buffer overflow vulnerability
GPAC is an open source multimedia framework. GPAC has a stack buffer overflow vulnerability that originates from the uncvparseconfig function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...
CVE-2025-70298
GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmxparsetags function...
CVE-2025-70309
A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...
CVE-2025-70307
A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...