EUVD-2022-49863

Malicious code in bioql PyPI...

The vulnerability of the gf_text_process_sub function in the MP4Box command of the GPAC multimedia platform allows a perpetrator to execute arbitrary code.

The vulnerability of the gftextprocesssub function in the MP4Box command of the GPAC multimedia platform is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2019-11221

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC 0.7.1 has a buffer overflow issue in gfimportmessage in mediaimport.c. CVE-2019-11221 Note that Nessus relies on the presence of the package as reported by...

The vulnerability of the gf_filter_pid_inst_swap_delete_task function in the MP4Box multimedia platform GPAC allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the gffilterpidinstswapdeletetask function in the MP4Box multimedia platform GPAC utility is related to its use after release. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...

Malicious code in gf-ionic2 (npm)

The package gf-ionic2 was found to contain malicious code...

MAL-2025-21385 Malicious code in gf-ionic2 (npm)

The package gf-ionic2 was found to contain malicious code...

PT-2025-42857

Уязвимость функции gf isom get esd утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателя нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-42856

Уязвимость функции gf filter pid send event downstream утилиты MP4Box мультимедийной платформы GPAC связана с использованием памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании или выполнить произвольный код...

The vulnerability of the gf_ac4_presentation_ch_mode function in the MP4Box utility of the GPAC multimedia platform allows a perpetrator to cause a service failure.

The vulnerability of the gfac4presentationchmode function in the MP4Box utility of the GPAC multimedia platform is related to the handling of the zero pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_ac4parser_bs function in the MP4Box multimedia platform of GPAC allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gfac4parserbs function in the MP4Box utility of the GPAC multimedia platform is related to the assignment of a zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

PT-2025-33662 · Gnu +1 · Gpac +1

Уязвимость функции gf filter pid resolve file template ex утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

The vulnerability of the gf-media-import function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the gf-media-import function in the MP4Box utility of the GPAC multimedia platform is related to a buffer overflow attack. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...

The vulnerability of the naludmx_configure_pid component in the gf_sei_load_from_state function of the internal() function in the filters/sei_load.c file, a multimedia platform for GPAC, allows a attacker to cause a service failure by terminating the application abnormally or executing arbitrary code.

The vulnerability of the naludmxconfigurepid component in the gfseiloadfromstate function of the filters/seiload.c file, within the GPAC multimedia platform, is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure by...

PT-2025-33658 · Gnu +1 · Gpac +1

Уязвимость функции gf filter pid inst swap delete task утилиты MP4Box мультимедийной платформы GPAC связана с использованием после освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2026-52558

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A use-after-free issue exists in the gf sei load from state internal function located in /filters/sei load.c. This occurs when the software processes a specially crafted MPEG-2 TS file,...

PT-2025-34089 · Gnu +1 · Gpac +1

Уязвимость функции gf parse lfrac утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

CVE-2025-5327

A vulnerability was found in chshcms mccms 2.7. It has been classified as critical. This affects the function index of the file sys/apps/controllers/api/Gf.php. The manipulation of the argument pic leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit h...

PT-2026-49271

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4 Description A heap use-after-free occurs in the gf node get tag function within the scenegraph/base scenegraph.c file. This issue allows a remote attacker to trigger a Denial of Service DoS by providing a specially...

PT-2025-34086

Уязвимость функции gf node get tag утилиты MP4Box мультимедийной платформы GPAC связана с использованием после освобождения. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании или выполнить произвольный код...

PT-2025-34081

Уязвимость функции gf isom vp config new утилиты MP4Box мультимедийной платформы GPAC связана с переполнением буфера в куче. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...