CVE-2025-60493

A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

RHEL 9 : kernel (RHSA-2026:79784)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:79784 advisory. The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: udp: fix potential use-after-free in...

PT-2026-120632

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

EUVD-2025-211162

A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a segmentation violation in the gfisomgetesd function located at /isomedia/isomread.c; it may allow attackers to cause a denial of service by providing specially crafted XML files...

CVE-2025-60497

The GPAC Project/MP4Box software, specifically versions prior to 2.5 , is vulnerable to a segmentation violation in the GetESD function located at /isomedia/track.c. An attacker can exploit this flaw by supplying a crafted MP4 file to cause a Denial of Service (DoS) . The vulnerability is categor...

CVE-2025-60487

A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

PT-2026-120628

A segmentation violation in the gf isom get esd function /isomedia/isom read.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

CVE-2025-60497

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60493

A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60493

GPAC Project/MP4Box versions prior to 2.5 are vulnerable to a segmentation violation within the check_media_profile function (located in /mp4box/mp4box.c). This vulnerability, identified as CWE-476 (NULL Pointer Dereference), allows an attacker to trigger a Denial of Service (DoS) by providing a ...

CVE-2025-60497

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60493

A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120496

In Eclipse OpenJ9 versions up to 0.63.0, the JITServer component is vulnerable to denial of service due to improper boundary checks during protocol message and reply handling. An unauthenticated remote attacker or malicious JITServer can transmit malformed network payloads that cause out-of-bound...

AlmaLinux 9.2 [TuxCare] Security Update: jasper / jasper-devel / jasper-libs / jasper-utils (ALMALINUX9.2:CLSA-2026:1792566014)

The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2026:1792566014 advisory. - A vulnerability found in jasper. This security vulnerability happens because of a memory leak bug in function cmdoptsparse that can cause a...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a segmentation fault in the GetESD function located at /isomedia/track.c. Attackers can exploit this by providing a specially crafted MP4 file, potentially leading to a denial of service...

EUVD-2025-211160

A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

CVE-2025-60487

The GPAC Project/MP4Box (versions prior to 2.5 ) is vulnerable to a segmentation violation within the gf_isom_get_esd function, located in /isomedia/isom_read.c. An attacker can trigger a Denial of Service (DoS) by providing a crafted XML file . A Nessus plugin indicates that some Linux distribut...

CVE-2025-60487

A segmentation violation in the gfisomgetesd function /isomedia/isomread.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted XML file...

SUSE CVE-2026-110673

Cpanel::JSON::XS versions before 4.80 for Perl allow stack exhaustion via nested tagged values under allowtags in decodetag. With allowtags, "" starts a tagged value. Its tag and value are decoded recursively, and each can start another tagged value. Unlike arrays and objects, this nesting is not...