ROS-20260910-73-0087

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after deallocation during processing of an incorrect XMT scene, allows a perpetrator to cause a service failure...

ROS-20260910-73-0157

The vulnerability of the LinePropertiesCreate function in the MP4Box utility of the GPAC multimedia platform, which stems from a stack overflow due to uncontrolled recursion during the processing of an incorrect XMT scene, allows a malicious actor to cause service failure...

ROS-20260910-73-0127

The vulnerability of the JSScriptLoadVRML function in the MP4Box utility of the GPAC multimedia platform, which stems from handling an incorrect XMT scene by swapping the zero pointer, allows a malicious actor to cause a service failure...

ROS-20260910-73-0161

The vulnerability of the gfsgdel function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure by exploiting memory issues after it is released during the processing of an incorrect XMT scene...

ROS-20260910-73-0145

The vulnerability of the gfsgcommandapply function in the MP4Box utility of the GPAC multimedia platform, which relates to the handling of incorrect XMT scenes by resetting the null pointer, allows a violator to trigger a service failure...

ROS-20260910-73-0162

The vulnerability of the gfsgcommandnew function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260910-73-0163

The vulnerability of the gfnodegetname function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

EUVD-2026-15366

In the Linux kernel, the following vulnerability has been resolved: nvmet-fcloop: Check remoteport portstate before calling done callback In nvmefchandlelsrqstwork, the lsrsp-done callback is only set when remoteport-portstate is FCOBJSTATEONLINE. Otherwise, the nvmefcxmtlsrsp's LLDD call to...

EUVD-2025-205822

Malicious code in npm-xmt npm...

Malicious code in npm-xmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fcf1d57a75f915c7959a484b36e4b23c72425b90256a860d8d52e058599af296 The package npm-xmt was found to contain malicious code. Source: ghsa-malware 66603f4e5606fa61cf79355902ed86e376156cd0b163be93e0b471b87180e0b2 Any...

The vulnerability of the gf_node_get_field_by_name() function (scenegraph/base_scenegraph.c) in the MP4Box utility of the GPAC multimedia platform. This vulnerability allows a malicious actor to execute arbitrary code or cause a denial-of-service attack.

The vulnerability of the gfnodegetfieldbyname function scenegraph/basescenegraph.c in the MP4Box utility of the GPAC multimedia platform is related to the pointer manipulation during the processing of MPEG-4 XMT files. Exploiting this vulnerability could allow an attacker to execute arbitrary cod...

The vulnerability of the gf_scene_ns_connect_object() function (compositor/scene_ns.c) in the MP4Box multimedia platform’s utilities allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the gfscenensconnectobject function compositor/scenens.c in the MP4Box multimedia platform’s utilities is related to the pointer manipulation during XMT file processing. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

PT-2025-28193 · Gnu +1 · Gpac +1

Уязвимость функции gf node get field by name scenegraph/base scenegraph.c утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателей при обработке MPEG-4 XMT-файлов. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код или вызвать отказ в обслуживани...

CVE-2024-6064

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmtnodeend of the file src/scenemanager/loaderxmt.c of the component MP4Box. The manipulation leads to use after free. Local access is required to...

PT-2024-37358 · Gpac +1 · Gpac +1

Name of the Vulnerable Software and Affected Versions: GPAC version 2.5-DEV-rev228-g11067ea92-master Description: A problem was found in the function xmt node end of the file src/scene manager/loader xmt.c of the component MP4Box. The issue leads to use after free. Local access is required to...

CVE-2022-42901

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19...

CVE-2022-42901

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19...

Stack overflow

Bentley MicroStation and MicroStation-based applications may be affected by out-of-bounds and stack overflow issues when opening crafted XMT files. Exploiting these issues could lead to information disclosure and code execution. The fixed versions are 10.17.01.58 for MicroStation and 10.17.01.19...

Bentley Systems MicroStation和Bentley View 缓冲区错误漏洞

Bentley Systems MicroStation and Bentley View are both products of Bentley Systems, U.S.A. MicroStation is a Cad software platform for 2D and 3D design and drafting.Bentley View is a freeware viewer. A buffer error vulnerability exists in MicroStation versions prior to 10.17.01.58 and Bentley Vie...

CVE-2022-42901

Bentley MicroStation and Bentley View are affected by out-of-bounds and stack overflow issues when opening crafted XMT files, potentially enabling information disclosure and code execution. Affected products and versions: MicroStation prior to 10.17.01.58 and Bentley View prior to 10.17.01.19. Fi...