The vulnerability of the gf_isom_add_track_kind() function in the isomedia/isom_write.c file, implemented by the MP4Box encoder of the GPAC multimedia platform, allows a malicious actor to cause service failures through a specially created MP4 file.

The vulnerability of the gfisomaddtrackkind function in the isomedia/isomwrite.c file, belonging to the MP4Box encoder of the GPAC multimedia platform, is related to pointer dereferencing errors. Exploiting this vulnerability could allow an attacker to cause service failures through the use of a...

CVE-2025-55639

GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gfisomaddtrackkind function at isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

UBUNTU-CVE-2025-60485

A segmentation violation in the gfisomapplesettagex function /isomedia/isomwrite.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2019-20168

An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gfisomboxdumpex in isomedia/boxfuncs.c...

CVE-2022-27145

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gfisomgetsampleformovietime of mp4box...

PT-2025-42857

Уязвимость функции gf isom get esd утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателя нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-34081

Уязвимость функции gf isom vp config new утилиты MP4Box мультимедийной платформы GPAC связана с переполнением буфера в куче. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-34091

Уязвимость функции gf isom get user data count утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызывать отказ в обслуживании...

CVE-2023-47384

MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gfisomaddchapter at /isomedia/isomwrite.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted MP4 file...

CVE-2023-37766

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

Design/Logic Flaw

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

CVE-2023-37766

GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gfisomremoveuserdata function at /lib/libgpac.so...

PT-2022-8711

Name of the Vulnerable Software and Affected Versions MP4Box - GPAC version 0.8.0-rev177-g51a8ef874-master Description A Null pointer dereference issue exists via the gf isom get track id function, causing a denial of service. Recommendations For MP4Box - GPAC version...

PT-2021-24174

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: A null pointer dereference issue exists in the gf isom parse movie boxes internal function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider avoiding the use...

DEBIAN-CVE-2021-32139

The gfisomvpconfigget function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-6556

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf isom vp config get function in the MP4Box command of the GPAC multimedia platform. It is associated with NULL pointer dereference errors. Exploitation of this issue allows a remote...

PT-2021-6518 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the gf isom oinf read entry function of the MP4Box component in the GPAC multimedia platform. This leak is caused by incorrect memory deallocation before removing the la...

PT-2021-6470 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is related to a memory leak in the gf isom get root od function of the MP4Box component in the GPAC multimedia platform. This allows a remote attacker to access confidential data by using a specially...

PT-2021-19225

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom cenc get default info...

PT-2021-19224

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the gf isom set extraction slc...