EUVD-2025-211140

A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60496

A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60496

A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60496

A Floating-Point Exception FPE in the reframersendpacket function /filters/reframer.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60496

The GPAC Project/MP4Box software (versions before 2.5 ) contains a Floating-Point Exception (FPE) in the reframer_send_packet function located at /filters/reframer.c. An attacker can exploit this vulnerability by providing a crafted MP4 file to cause a Denial of Service (DoS) . No specific exploi...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2025-55653

GPAC MP4Box v2.4 contains a floating point exception within the gf_parse_lfrac function located in utils/error.c. The vulnerability is triggered when the software processes a crafted MP4 file containing a fraction string with a zero-denominator , causing the application to divide by zero. This re...

CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

EUVD-2025-211112

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

PT-2026-116126

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A floating point exception occurs in the gf parse lfrac function utils/error.c when processing a specially crafted MP4 file. The issue is triggered by a zero-denominator fraction string, which leads to a...

Astra Linux – Vulnerability in openexr

A flaw was discovered in OpenEXR’s TiledInputFile functionality. This flaw allows an attacker who can submit a crafted single-part non-image file to have it processed by OpenEXR, resulting in a floating-point exception error. The greatest threat posed by this vulnerability is to system availabili...

Rocky Linux 9.6 [TuxCare] Security Update: clang / clang-analyzer / clang-devel / clang-libs / etc (ALMALINUX9.6:CLSA-2026:1791537402)

The Rocky Linux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791537402 advisory. - When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers wh...

AlmaLinux 9.6 [TuxCare] Security Update: clang / clang-analyzer / clang-devel / clang-libs / etc (ALMALINUX9.6:CLSA-2026:1791537402)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1791537402 advisory. - When using Arm Cortex-M Security Extensions CMSE, Secure stack contents can be leaked to Non-secure state via floating-point registers when...

Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

A temporary execution vulnerability within AMD CPUs may allow a local user-privileged attacker to leak data through the floating-point divisor unit, potentially leading to a loss of confidentiality...

Astra Linux – Vulnerability in Firefox

A transient execution vulnerability, named Floating Point Value Injection FPVI, allowed attackers to leak arbitrary memory addresses and may have also enabled JIT type confusion attacks. A related vulnerability, Speculative Code Store Bypass SCSB, did not affect Firefox. This vulnerability affect...

Astra Linux – Vulnerability in poppler, poppler-22

A floating-point exception in the PSStack::roll function of Poppler before version 25.04.0 can cause an application to crash when handling malformed inputs associated with INTMIN...

Astra Linux – Vulnerability in espeak-ng

It was discovered that Espeak-ng 1.52-dev contains a Floating Point Exception due to the use of the PeaksToHarmspect function in wavegen.c...

CLEANSTART-2023-TH77072 fdkaac commit 53fe239 was discovered to contain a floating point exception (FPE) via wav_open at /src/wav_reader

Security vulnerability affects the fdkaac package. fdkaac commit 53fe239 was discovered to contain a floating point exception FPE via wavopen at /src/wavreader...

AlmaLinux 9.6 [TuxCare] Security Update: espeak-ng / espeak-ng-devel / espeak-ng-doc / espeak-ng-vim (ALMALINUX9.6:CLSA-2026:1788372484)

The AlmaLinux 9.6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1788372484 advisory. - Espeak-ng 1.52-dev was discovered to contain a Floating Point Exception via the function PeaksToHarmspect at wavegen.c. CVE-2023-49994 Note...