EUVD-2026-2743

A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

CVE-2025-70305

A stack overflow in the dmxsaf function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .saf file...

EUVD-2026-2724

A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

EUVD-2026-2711

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2025-70309

The open-source multimedia framework GPAC v2.4.0 contains a stack buffer overflow vulnerability in the pcmreframe_flush_packet function. This flaw arises because the function fails to properly validate the length and size of the input data. An attacker can exploit this by providing a crafted WAV ...

CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

CVE-2025-70309

A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

Linux Distros Unpatched Vulnerability : CVE-2025-70298

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmxparsetags function. CVE-2025-70298 Note that Nessus relies on the presence of the packa...

CVE-2025-70307

A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...

Linux Distros Unpatched Vulnerability : CVE-2025-70303

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file. CVE-2025-70303 Note tha...

CVE-2025-70308

An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...

CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2025-70299

A heap buffer overflow vulnerability exists in the GPAC open-source multimedia framework, specifically within the avi_parse_input_file() function of version v2.4.0 . The flaw occurs because the function fails to properly validate the length and size of input data when processing AVI format files ...

CVE-2025-70299

A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...

CVE-2025-70305

A stack overflow in the dmxsaf function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .saf file...

CVE-2025-70303

A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2025-70303

The open source multimedia framework GPAC v2.4.0 is affected by a heap buffer overflow vulnerability (also described as a stack buffer overflow in some reports) within the uncv_parse_config() function. The root cause is a failure to properly validate the length size of the input data . An attacke...

CVE-2025-70310

A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...

CVE-2025-70310

The multimedia framework GPAC v2.4.0 is vulnerable to a heap overflow (also identified as a stack buffer overflow in some reports) within the vorbis_to_intern() function. The flaw occurs because the software fails to correctly validate the length and size of input data, allowing an attacker to tr...