30 matches found
PT-2026-120613
A heap use-after-free in the dasher flush segment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...
ROS-20260706-73-0051
The vulnerability of the dasherprocess function in the MP4Box packaging tool of the GPAC multimedia platform relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
DEBIAN-CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
UBUNTU-CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
GPAC security vulnerabilities
GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 26.02.0 contained security vulnerabilities; these vulnerabilities stemmed from the use of the dasherprocess function, which allowed reusing of memory after heap deallocation, potentially leading to...
CVE-2025-60486
The GPAC Project/MP4Box packaging tool (versions prior to 26.02.0 ) is vulnerable to a heap use-after-free in the dasher_process function located at /filters/dasher.c. An attacker can exploit this memory mismanagement by supplying a crafted MPEG-2 file to trigger a Denial of Service (DoS) , causi...
CVE-2025-60486
Removed by vendor...
CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
EUVD-2025-210006
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
CVE-2025-60486
A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...
MP4Box Heap Buffer Overflow DoS
The vulnerability of the dasherprocess function in the MP4Box multimedia platform of GPAC is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...
ROS-20251008-04
The dumpisomsaps function file applications/mp4box/filedump.c, line 1743 does not check the pointers to NULL before accessing track structure fields, which allows an attacker to generate an MP4 file with a corrupted track there is no mandatory Sample Description Box - stsd. MP4 file with corrupte...
PT-2025-42855
Уязвимость функции dasher process утилиты MP4Box мультимедийной платформы GPAC связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...
PT-2026-45418
Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A heap use-after-free occurs in the dasher process function located in /filters/dasher.c. This issue allows attackers to cause a Denial of Service DoS by providing a specially crafted...
GPAC dasher_configure_pid DoS
The vulnerability of the dasherconfigurepid function on the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...