CVE-2025-55657

The GPAC MP4Box multimedia packager version v2.4 is vulnerable to a NULL pointer dereference within the gf_odf_vvc_cfg_write_bs function located in the odf/descriptors.c file. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted MP4 file . While some ...

CVE-2022-29339

In GPAC 2.1-DEV-rev87-g053aae8-master, function BSReadByte in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2...