Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/06/02 4:3 a.m.11 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References1
OSV
OSV
added 2026/06/01 3:16 p.m.6 views

DEBIAN-CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References1
OSV
OSV
added 2026/06/01 3:16 p.m.4 views

UBUNTU-CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/06/01 12:0 a.m.10 views

PT-2026-45418

A heap use-after-free in the dasher process function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2026/06/01 12:0 a.m.7 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.8AI score0.0013EPSS
Exploits0References5
EUVD
EUVD
added 2026/06/01 12:0 a.m.8 views

EUVD-2025-210006

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/06/01 12:0 a.m.29 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

0.0013EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2026/06/01 12:0 a.m.8 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.8AI score0.0013EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/06/01 12:0 a.m.8 views

GPAC 安全漏洞

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 26.02.0 contained security vulnerabilities; these vulnerabilities stemmed from the use of the dasherprocess function, which allowed reusing of memory after heap deallocation, potentially leading to...

5.5CVSS5.3AI score0.0013EPSS
Exploits0References4
CVE
CVE
added 2026/06/01 12:0 a.m.15 views

CVE-2025-60486

Affected software: GPAC Project/MP4Box. Vulnerability: heap use-after-free in the dasher_process function ( /filters/dasher.c ). Root cause: heap-use-after-free flaw that can be triggered via crafted MPEG-2 input. Impact: Denial of Service (DoS). Versions: vulnerable before 26.02.0. Exploitation ...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References5
Debian CVE
Debian CVE
added 2026/06/01 12:0 a.m.11 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0
Redos
Redos
added 2025/10/08 12:0 a.m.2 views

ROS-20251008-04

The dumpisomsaps function file applications/mp4box/filedump.c, line 1743 does not check the pointers to NULL before accessing track structure fields, which allows an attacker to generate an MP4 file with a corrupted track there is no mandatory Sample Description Box - stsd. MP4 file with corrupte...

7.4AI score
Exploits0
BDU FSTEC
BDU FSTEC
added 2024/09/24 12:0 a.m.4 views

The vulnerability of the dasher_configure_pid() function on the GPAC multimedia platform allows a intruder to trigger a service failure.

The vulnerability of the dasherconfigurepid function on the GPAC multimedia platform is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS7.2AI score0.01327EPSS
Exploits1References3Affected Software2
OSV
OSV
added 2024/02/05 6:15 p.m.2 views

DEBIAN-CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

7.5CVSS7.3AI score0.01327EPSS
Exploits1References1
OSV
OSV
added 2024/02/05 6:15 p.m.1 views

UBUNTU-CVE-2024-24266

gpac v2.2.1 was discovered to contain a Use-After-Free UAF vulnerability via the dasherconfigurepid function at /src/filters/dasher.c...

7.5CVSS5.8AI score0.01327EPSS
Exploits1References3
CNNVD
CNNVD
added 2024/02/05 12:0 a.m.6 views

GPAC Security Vulnerabilities

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC v2.2.1, which was discovered via the dasherconfigurepid function in /src/filters/dasher.c to contain a post-release reuse vulnerability...

7.5CVSS6.9AI score0.01327EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2024/02/05 12:0 a.m.4 views

PT-2024-6391 · Gpac +2 · Gpac +2

Name of the Vulnerable Software and Affected Versions: GPAC version 2.2.1 Description: The issue is related to a Use-After-Free UAF vulnerability in the dasher configure pid function. This vulnerability can be exploited by a remote attacker to cause a denial of service. The dasher configure pid...

7.8CVSS6.8AI score0.01635EPSS
Exploits3References15
BDU FSTEC
BDU FSTEC
added 2023/09/20 12:0 a.m.2 views

Vulnerability of the utils/xml_parser.c:1038, filters/dasher.c:8146, utils/alloc.c:170, filters/dasher.c:6332, filters/dasher.c:7389, filter_core/filter_pck.c:434 components of the multimedia platform GPAC, which allows a violator to trigger a service failure

The vulnerability in utils/xmlparser.c:1038, filters/dasher.c:8146, utils/alloc.c:170, filters/dasher.c:6332, filters/dasher.c:7389, and filtercore/filterpck.c:434 of the multimedia platform GPAC is related to the use of a zero pointer. Exploiting this vulnerability could allow an attacker to cau...

5.5CVSS5.9AI score0.00302EPSS
Exploits2References4Affected Software2
CNNVD
CNNVD
added 2023/08/31 12:0 a.m.5 views

GPAC 数字错误漏洞

GPAC is an open source multimedia framework. A numeric error vulnerability exists in versions prior to GPAC 2.3-DEV, which stems from a divide by zero flaw in scenemanager/swfsvg.c, filters/dasher.c, filters/muxisom.c, and scenemanager/swfparse.c. The flaw is caused by a division by zero...

5.5CVSS5.5AI score0.00295EPSS
Exploits1References3
OSV
OSV
added 2020/08/29 12:0 a.m.15 views

OSV-2020-1671 Heap-buffer-overflow in Dasher::Dasher

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=25243 Crash type: Heap-buffer-overflow READ 4 Crash state: Dasher::Dasher bool drawLineAA& QCosmeticStroker::drawPath...

7.2AI score
Exploits0References2
Rows per page
Query Builder