gpac:fuzz_scene: Heap-use-after-free in gf_node_unregister

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6308691635929088 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzscene Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x7688f66e02f0 Crash...

gpac:fuzz_scene: Crash in gf_svg_node_del

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5419170354495488 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerubsangpac Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x571d1e370250 Crash State:...

gpac:fuzz_scene: Heap-buffer-overflow in gf_node_register

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4954571494719488 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzscene Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7765358ea4a0 Crash State:...

gpac:fuzz_scene: Heap-use-after-free in gf_node_unregister

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=4714478829895680 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzscene Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x793e102e0140 Crash...

GPAC Denial-of-Service Vulnerability (CNVD-2026-23411)

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 26.02.0 contained a denial-of-service vulnerability. This vulnerability stemmed from a segmentation violation in the gfisomapplesettagex function. Attackers could exploit this vulnerability to cause a denial ...

Linux Distros Unpatched Vulnerability : CVE-2025-60477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to...

gpac:fuzz_scene: Heap-use-after-free in gf_sg_reset

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5395025424089088 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x795312ae00e0 Crash...

gpac:fuzz_scene: Heap-use-after-free in gf_node_get_attribute_by_tag

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=5045588495499264 Project: gpac Fuzzing Engine: libFuzzer Fuzz Target: fuzzscene Job Type: libfuzzerasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x79d1706e02c0 Crash...

DEBIAN-CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

gpac:fuzz_scene: Heap-use-after-free in lsr_restore_base

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6695610240794624 Project: gpac Fuzzing Engine: honggfuzz Fuzz Target: fuzzscene Job Type: honggfuzzasangpac Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x782c33b08490 Crash...

gpac:fuzz_probe_analyze: Heap-buffer-overflow in str2ullong

Project: https://github.com/gpac/gpac.git Detailed Report: https://oss-fuzz.com/testcase?key=6074198366945280 Project: gpac Fuzzing Engine: afl Fuzz Target: fuzzprobeanalyze Job Type: aflasangpac Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x78fe5d2eae59 Crash State:...

CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2025-60477

Removed by vendor...

The vulnerability of the m2tsdmx_send_packet() function in the MP4Box packaging tool of the GPAC platform allows a hacker to cause a service failure.

The vulnerability of the m2tsdmxsendpacket function in the MP4Box packaging tool of the GPAC multimedia platform is related to a buffer overflow in the dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

The vulnerability of the gf_media_get_color_info() function in the MP4Box packaging tool of the GPAC multimedia platform allows a malicious actor to cause a service failure.

The vulnerability of the gfmediagetcolorinfo function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2025-60477: NULL Pointer Dereference

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2025-60477

A NULL pointer dereference in the gffilterpidresolvefiletemplateex function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...