34 matches found
EUVD-2026-42590
A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...
The vulnerability of the gf_xml_parse_bit_sequence_bs() function in the MP4Box packaging tool of the GPAC multimedia platform allows a malicious actor to execute arbitrary code or cause a service failure.
The vulnerability of the gfxmlparsebitsequencebs function in the MP4Box packaging tool of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failur...
CVE-2025-15668 GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow
A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpddelentry of the file src/isomedia/boxcodebase.c of the component MP4Box. Such manipulation of the argument data leads to heap-based buffer overflow. Local access is required to approach this attack. The...
ROS-20260706-73-0063
The vulnerability of the gfmediagetcolorinfo function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260706-73-0054
The vulnerability of the m2tsdmxsendpacket function, implemented by the MP4Box packaging tool of the GPAC multimedia platform, is related to buffer overflows in dynamic memory. Exploiting this vulnerability could allow an attacker to cause a service failure...
PT-2026-55930
Name of the Vulnerable Software and Affected Versions GPAC versions prior to b40ce70f5 Description A heap-based buffer overflow occurs in the MP4Box component within the sgpd del entry function located in the src/isomedia/box code base.c file. This issue is triggered by the manipulation of the da...
ROS-20260706-73-0064
The vulnerability of the gfisomapplesettagex function in the MP4Box packaging tool of the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
DEBIAN-CVE-2025-60464
A use-after-free in the gfseiloadfromstateinternal function /filters/seiload.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 TS file...
CVE-2025-55643
A NULL pointer dereference in the TrackWriter handling component filters/muxisom.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
CVE-2025-60483
A NULL pointer dereference in the gfac4presb4backchannelspresent function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted AC4 file...
The vulnerability of the StatSFVec2f function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure.
The vulnerability of the StatSFVec2f function in the MP4Box utility of the GPAC multimedia platform is related to the pointer swapping between the zero pointer and other pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2021-45831
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A Null Pointer Dereference vulnerability exitgs in GPAC 1.0.1 in MP4Box via strlenavx2, which causes a Denial of Service. CVE-2021-45831 Note that Nessus relies...
Linux Distros Unpatched Vulnerability : CVE-2021-31262
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The AV1DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...
The vulnerability of the gf_opus_parse_packet_header function in the MP4Box utility of the GPAC multimedia platform allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the gfopusparsepacketheader function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...
The vulnerability of the stbl_AddSize function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure or execute arbitrary code.
The vulnerability of the stblAddSize function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a malicious actor to cause service failures or execute arbitrary code...
The vulnerability of the DumpMovieInfo function in the MP4Box utility of the GPAC multimedia platform allows a hacker to induce a service failure.
The vulnerability of the DumpMovieInfo function in the MP4Box utility of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
The vulnerability of the gf_odf_ac4_cfg_dsi_v1 function in the MP4Box utility of the GPAC multimedia platform allows a hacker to induce a service failure.
The vulnerability of the gfodfac4cfgdsiv1 function in the MP4Box utility of the GPAC multimedia platform involves reading memory beyond the allocated buffer. Exploiting this vulnerability can allow an attacker to cause a service failure...
The vulnerability of the gf_node_get_field_by_name() function (scenegraph/base_scenegraph.c) in the MP4Box utility of the GPAC multimedia platform. This vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack.
The vulnerability of the gfnodegetfieldbyname function scenegraph/basescenegraph.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of MPEG-4 XMT files. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...
The vulnerability of the gf_dash_group_get_audio_channels() function (media_tools/dash_client.c) in the MP4Box utility of the GPAC multimedia platform allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the gfdashgroupgetaudiochannels function mediatools/dashclient.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of DASH manifests. Exploiting this vulnerability could allow an attacker to execute arbitrary co...