CVE-2026-90792

A flaw has been found in GPAC up to f1219cde. This issue affects the function gfnodelistgetchild of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation of the argument Target causes null pointer dereference. The attack is possible to be carried out remotely. The exploi...

EUVD-2026-77206

A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gfnodechangedinternal of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes use after free. It is possible to initiate the attack remotely. The exploit has been...

CVE-2026-90609

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-90609

CVE-2026-90609 affects GPAC (up to commit f1219cde), specifically a null pointer dereference in the MP4Box component within the file scenegraph/vrml_tools.c. The vulnerability is triggered locally with low complexity and low privileges required, resulting in a low availability impact (likely a cr...

CVE-2026-90609 GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

PT-2026-90996

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml tools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

PT-2026-49271

A heap use-after-free in the gf node get tag function scenegraph/base scenegraph.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2026-39103

Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the src/scenegraph/svgattributes.c, svgparsestrings, gfsvgparseattribute...

Linux Distros Unpatched Vulnerability : CVE-2022-45283

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c. CVE-2022-45283 Note that Nessus...

The vulnerability of the NewSFDouble file in Scenegraph/vrmltools.c on the multimedia platform GPAC, which allows a hacker to cause a service failure.

The vulnerability of the NewSFDouble function in the Scenegraph/vrmltools.c file of the GPAC multimedia platform is related to the incorrect use of dynamic memory during program execution. Exploiting this vulnerability may allow an attacker to cause a service failure...

DEBIAN-CVE-2023-46871

GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrmltools.c:300. This vulnerability may lead to a denial of service...

CVE-2023-46871

GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrmltools.c:300. This vulnerability may lead to a denial of service...

Design/Logic Flaw

GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrmltools.c:300. This vulnerability may lead to a denial of service...

PT-2023-8940 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: gpac versions 2.3-DEV-rev617-g671976fcc-master Description: The issue is related to incorrect use of dynamic memory in the gf mpd resolve url function of the media tools/mpd.c file in the GPAC multimedia platform. This can lead to memory leak...

PT-2023-8968 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev602-ged8424300-master Description: The issue is related to a memory leak in the NewSFDouble function in the scenegraph/vrml tools.c file of the GPAC multimedia platform. This may lead to a denial of service. The...

CVE-2022-45283

GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...

Stack overflow

GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...

CVE-2022-45283

GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...

CVE-2022-45283

GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smilparsetimelist parameter at /scenegraph/svgattributes.c...

UBUNTU-CVE-2022-3957

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svgparsepreserveaspectratio of the file scenegraph/svgattributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the...