CVE-2025-60467

A use-after-free in the gffilterpidinstswapdeletetask function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60471

A use-after-free in the gffilterpidreconfiguretaskdiscard function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60473

A NULL pointer dereference in the gffilterinparentchain function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2025-60468

The MP4Box component of the GPAC Multimedia Open Source Project (version 2.5-DEV-rev1593-gfe88c3545-master ) is vulnerable to a heap use-after-free (Buffer Overflow) in the filter_core/filter_pid.c file. The issue resides in the gf_filter_pid_inst_swap_delete_task() function, which improperly acc...

CVE-2025-60474

The GPAC Project/MP4Box packaging tool (versions prior to 26.02.0 ) is vulnerable to a buffer overflow in the gf_media_import function located in /media_tools/av_parsers.c. An attacker can exploit this by providing a specially crafted input signal to cause a Denial of Service (DoS) . While some d...

CVE-2025-60473

The GPAC Project/MP4Box multimedia platform (versions before 26.02.0 ) is vulnerable to a NULL pointer dereference within the gf_filter_in_parent_chain function located in /filter_core/filter_pid.c. This issue arises from improper pointer manipulation and can be triggered by an attacker providing...

CVE-2025-60467

A use-after-free vulnerability exists in the gf_filter_pid_inst_swap_delete_task function (located in /filter_core/filter_pid.c) of the GPAC Project/MP4Box multimedia platform. This flaw affects versions before 26.02.0 . An attacker can exploit this by supplying a crafted media file to trigger a ...

CVE-2025-60471

Removed by vendor...

CVE-2025-60468

Removed by vendor...

CVE-2025-60474

Removed by vendor...

CVE-2025-60466

Removed by vendor...

ROS-20260624-73-0004

The vulnerability in gpac is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2025-60474

A buffer overflow in the gfmediaimport function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2025-60466

A use-after-free in the gffilterpidgetpacket function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60468

GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service local. The component is: filtercore/filterpid.c L:574-580: function gffilterpidinstswapdeletetask improperly accesses freed objects...

CVE-2025-60474: Stack-based Buffer Overflow

A buffer overflow in the gfmediaimport function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2025-60471

A use-after-free in the gffilterpidreconfiguretaskdiscard function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60467: Use After Free

A use-after-free in the gffilterpidinstswapdeletetask function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60471

A use-after-free vulnerability exists in the gf_filter_pid_reconfigure_task_discard function (located in /filter_core/filter_pid.c) of GPAC Project/MP4Box before version 26.02.0 . An attacker can exploit this flaw by supplying a crafted media file to trigger a Denial of Service (DoS) . This type ...

CVE-2025-60471

A use-after-free in the gffilterpidreconfiguretaskdiscard function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...