5745 matches found
CVE-2025-70298
GPAC (open-source multimedia framework): CVE-2025-70298 affects GPAC v2.4.0, via an out-of-bounds read in oggdmx_parse_tags. The root cause is inadequate validation of input data length, enabling an attacker to trigger a denial of service. The vulnerability is documented across multiple sources (...
CVE-2025-70304
A buffer overflow in the vobsubgetsubpicduration function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...
Linux Distros Unpatched Vulnerability : CVE-2025-70298
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmxparsetags function. CVE-2025-70298 Note that Nessus relies on the presence of the packa...
CVE-2025-70304
Removed by vendor...
CVE-2025-70308
An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .gsf file...
CVE-2025-70303
A heap overflow in the uncvparseconfig function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted MP4 file...
CVE-2025-70305
A stack overflow in the dmxsaf function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .saf file...
EUVD-2026-2724
A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...
GPAC 安全漏洞
GPAC is an open source multimedia framework. GPAC has a stack buffer overflow vulnerability that originates from the uncvparseconfig function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...
GPAC 安全漏洞
GPAC is an open source multimedia framework. GPAC has a heap buffer overflow vulnerability that stems from the aviparseinputfile function failing to properly validate the length and size of the input data, which can be exploited by an attacker to cause a denial of service...
GPAC 安全漏洞
GPAC is an open source multimedia framework. GPAC suffers from a stack buffer overflow vulnerability that stems from the dmxsaf function failing to properly validate the length and size of input data, which can be exploited by an attacker to cause a denial of service...
CVE-2025-70309
A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...
CVE-2025-70305
A stack overflow in the dmxsaf function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .saf file...
CVE-2025-70304
GPAC v2.4.0 contains a buffer overflow in vobsub_get_subpic_duration() due to insufficient validation of input data length, allowing a crafted packet to trigger a DoS. The issue is documented across multiple databases (CNVD, OSV, CVE catalogs) with the same description. A PoC appears to be publis...
CVE-2025-70302
A heap overflow in the ghidmxdeclareopidbin function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted input...
CVE-2025-70307
A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet...
CVE-2025-70310
GPAC v2.4.0 contains a heap overflow in the vorbis_to_intern() function, exploitable via a crafted .ogg file to cause a Denial of Service. Multiple connected sources (CNVD, Red Hat, Debian/OSV, NVD) corroborate a DoS-inducing overflow in vorbis_to_intern, with CVSS/metrics indicating a local atta...
CVE-2025-70308
CVE-2025-70308 describes an out-of-bounds read in GPAC v2.4.0’s GSF demuxer filter, exploitable via a crafted .gsf file to cause Denial of Service. The connected sources (CNVD, OSV, Debian/NASL, NVD, etc.) confirm GPAC as the affected product and the GSF demuxer as the vulnerable component, with ...
GPAC 安全漏洞
GPAC is an open source multimedia framework. GPAC suffers from an out-of-bounds read vulnerability that stems from the oggdmxparsetags function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...
