CVE-2024-50665

gpac 2.4 contains a SEGV at src/isomedia/drmsample.c:1562:96 in isomcencgetsaibysaizsaio in MP4Box...

CVE-2024-50664

GPAC 2.4 contains a heap-buffer-overflow in isomedia/sample_descs.c:1799 (gf_isom_new_mpha_description in gpac/MP4Box). This is a concrete vulnerability with CVSS v3.1 base score 7.8 (HIGH) via LOCAL attack vector, low complexity, no privileges required, user interaction required, and impact to c...

PT-2025-2882 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac version 2.4 Description: The issue is related to a SEGV at src/isomedia/drm sample.c:1562:96 in the isom cenc get sai by saiz saio function in MP4Box. This indicates a potential problem with memory access or handling in the specified...

CVE-2024-50664

Removed by vendor...

CVE-2024-50664

gpac 2.4 contains a heap-buffer-overflow at isomedia/sampledescs.c:1799 in gfisomnewmphadescription in gpac/MP4Box...

CVE-2024-50664

gpac 2.4 contains a heap-buffer-overflow at isomedia/sampledescs.c:1799 in gfisomnewmphadescription in gpac/MP4Box...

PT-2025-2881 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac version 2.4 Description: The issue is a heap-buffer-overflow in the gpac/MP4Box module, specifically at isomedia/sample descs.c:1799 in the gf isom new mpha description function. Recommendations: For gpac version 2.4, as a temporary...

CVE-2024-50665

Removed by vendor...

CVE-2024-50664

gpac 2.4 contains a heap-buffer-overflow at isomedia/sampledescs.c:1799 in gfisomnewmphadescription in gpac/MP4Box...

PT-2026-3060

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A stack overflow exists in the pcmreframe flush packet function. This flaw can be triggered by processing a specially crafted WAV file, potentially leading to a Denial of Service DoS. Recommendations At the momen...

PT-2026-3076

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A stack overflow exists in the dmx saf function of GPAC. This flaw can be triggered by processing a specially crafted .saf file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...

PT-2026-3080

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A stack overflow exists in the dump ttxt sample function. This flaw allows attackers to cause a Denial of Service DoS by sending a specially crafted packet. Recommendations Update to a newer version of GPAC that...

PT-2026-3083

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A heap overflow exists in the ghi dmx declare opid bin function. This issue allows attackers to cause a Denial of Service DoS by providing a crafted input. Recommendations Update to a newer version that contains ...

PT-2026-3066

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description An out-of-bounds read exists in the GSF demuxer filter component. Processing a specially crafted .gsf file can lead to a Denial of Service DoS. The issue involves reading data beyond allocated buffer boundaries...

DEBIAN-CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

UBUNTU-CVE-2023-4679

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...

CVE-2023-4679

GPAC 2.3-DEV-revrelease contains a use-after-free in gf_filterpacket_del (filter_core/filter.c:38) that can lead to a double-free and application crash. Multiple sources (NVD/NESSUS/OSV/RedHat Debian/CVE listings) corroborate the same description. No concrete remediation or patch version is provi...

CVE-2023-4679

Removed by vendor...

CVE-2023-4679 Use After Free in gpac/gpac

A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gffilterpacketdel function in filtercore/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash...