7521 matches found
CVE-2025-52293
Removed by vendor...
CVE-2025-52292
Removed by vendor...
CVE-2025-55659
Removed by vendor...
CVE-2025-55657
Removed by vendor...
GPAC MP4Box 代码问题漏洞
GPAC MP4Box is a open-source multimedia packager from GPAC. It is primarily used for processing ISOBMF files such as MP4 and 3GP, but it can also be used for importing/exporting media from container files like AVI, MPG, MKV, and MPEG-2 TS. Version 2.4 of GPAC MP4Box has a code vulnerability cause...
CVE-2025-55657
A NULL pointer dereference in the gfodfvvccfgwritebs function odf/descriptors.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55658
Removed by vendor...
CVE-2025-55658
GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfopusparsepacketheader function mediatools/avparsers.c. bThis vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2025-52292
A stack buffer overflow in the fileinprocess function infile.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
gpac:fuzz_scene: Segv on unknown address in gf_node_register
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5942827464065024 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State: gfnoderegister...
gpac:fuzz_scene: Heap-use-after-free in ReplaceDEFNode
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5905734247448576 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7576b4be0040 Crash...
PT-2026-56798
Name of the Vulnerable Software and Affected Versions GPAC version 26.03-DEV Description An issue exists in the MP4Box component within the vobsub read idx function of the /src/media tools/vobsub.c file. A local attacker can trigger an out-of-bounds read by manipulating the num langs argument. An...
gpac:fuzz_scene: Crash in gf_node_list_add_child
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6566986070163456 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x00009fffa010 Crash State: gfnodelistaddchild...
gpac:fuzz_scene: Stack-buffer-overflow in gf_mx2d_decompose
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5380081857134592 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: Stack-buffer-overflow READ 4 Crash Address: 0x77cfca3d01f8 Crash State:...
gpac:fuzz_scene: Heap-use-after-free in lsr_restore_base
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4605349750702080 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x746bc8ce0db0 Crash...
CVE-2025-60477
A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...
CVE-2026-7135
A security flaw has been discovered in GPAC up to 26.03-DEV-rev105-g8f39a1eb3-master. Affected by this vulnerability is the function elngboxread of the file src/isomedia/boxcodebase.c of the component MP4Box. Performing a manipulation of the argument elng results in out-of-bounds read. The attack...
CVE-2026-9567
A security flaw has been discovered in GPAC up to 2.4.0. Affected is the function MergeFragment of the file src/isomedia/isomintern.c of the component MP4Box. The manipulation results in null pointer dereference. The attack needs to be approached locally. The exploit has been released to the publ...
CVE-2026-8124
A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The...
gpac:fuzz_scene: Heap-use-after-free in ReplaceDEFNode
Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6669904425320448 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x77d1a8ce0100 Crash State:...