CVE-2025-55639

GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gfisomaddtrackkind function at isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

PT-2026-49271

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A heap use-after-free occurs in the gf node get tag function within the scenegraph/base scenegraph.c file. This issue allows a remote attacker to trigger a Denial of Service DoS by providing a specially...

DEBIAN-CVE-2017-17081

The gmcmmx function in libavcodec/x86/mpegvideodsp.c in FFmpeg 2.3 and 3.4 does not properly validate widths and heights, which allows remote attackers to cause a denial of service integer signedness error and out-of-array read via a crafted MPEG file...