974 matches found
CVE-2025-55648: Heap-based Buffer Overflow
A heap buffer overflow in the gfopusparsepacketheader function mediatools/avparsers.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55649: NULL Pointer Dereference
A NULL pointer dereference in the gfmediamapesd function mediatools/isomtools.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55650: Use After Free
A heap use-after-free in the gfnodegettag function scenegraph/basescenegraph.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55645
GPAC MP4Box v2.4 contains a heap buffer overflow vulnerability in the gf_cenc_set_pssh function located in isomedia/drm_sample.c. The root cause is a failure to correctly verify the length of input data during dynamic memory operations. An attacker can exploit this by providing a specially crafte...
CVE-2025-55647
The GPAC MP4Box v2.4 software is vulnerable to an Out-of-Memory condition within the mp4_mux_cenc_insert_pssh function located in filters/mux_isom.c . This flaw is caused by an integer overflow , which can be triggered by an attacker providing a crafted MP4 file . Exploitation of this vulnerabili...
PT-2026-49274
Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A heap buffer overflow occurs in the gf opus parse packet header function within the media tools/av parsers.c file. This issue allows an attacker to trigger a Denial of Service DoS by providing a specially...
PT-2026-49273
Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description An Out-of-Memory condition exists in the mp4 mux cenc insert pssh function within the filters/mux isom.c file. This issue allows a remote attacker to trigger a Denial of Service DoS by providing a specially...
CVE-2025-55647
An Out-of-Memory in the mp4muxcencinsertpssh function filters/muxisom.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55641: NULL Pointer Dereference
A NULL pointer dereference in the gfisomcopysampleinfo function isomedia/isomwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55652: Heap-based Buffer Overflow
A heap buffer overflow in the gfisomvpconfignew function isomedia/avcext.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55661: Heap-based Buffer Overflow
A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55642: Divide By Zero
GPAC MP4Box v2.4 was discovered to contain a floating point exception in the avidmxprocess function isomedia/isomwrite.c...
CVE-2025-55643: NULL Pointer Dereference
A NULL pointer dereference in the TrackWriter handling component filters/muxisom.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55644: Use After Free
A heap use-after-free in the gfnodegettag function scenegraph/basescenegraph.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55647: Integer Overflow or Wraparound
An Out-of-Memory in the mp4muxcencinsertpssh function filters/muxisom.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55663: NULL Pointer Dereference
A segmentation violation in the TrackSetStreamDescriptor function isomedia/track.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55663
A segmentation violation in the TrackSetStreamDescriptor function isomedia/track.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-55641
A NULL pointer dereference in the gfisomcopysampleinfo function isomedia/isomwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
