5745 matches found
GPAC 安全漏洞
GPAC is an open source multimedia framework. GPAC suffers from an out-of-bounds read vulnerability that stems from the oggdmxparsetags function failing to properly validate the length size of the input data, which can be exploited by an attacker to cause a denial of service...
CVE-2025-70298
GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmxparsetags function...
CVE-2025-70309
A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...
Linux Distros Unpatched Vulnerability : CVE-2025-70307
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A stack overflow in the dumpttxtsample function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted packet. CVE-2025-70307 Note that...
CVE-2025-70309
GPAC 2.4.0 is affected by a stack overflow in pcmreframe_flush_packet triggered by a crafted WAV file, per multiple sources (CNVD, RedHat, NVD, OSV, Debian, Ubuntu, and others). The vulnerability stems from insufficient validation of input data length/size in the function, enabling a Denial of Se...
CVE-2025-70310
A heap overflow in the vorbistointern function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted .ogg file...
CVE-2025-70309
A stack overflow in the pcmreframeflushpacket function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted WAV file...
CVE-2025-70299
A heap overflow in the aviparseinputfile function of GPAC v2.4.0 allows attackers to cause a Denial of Service DoS via a crafted AVI file...
CVE-2025-70303
Removed by vendor...
CVE-2025-70302
Removed by vendor...
CVE-2025-70298
Removed by vendor...
CVE-2025-70305
Removed by vendor...
CVE-2025-70308
Removed by vendor...
CVE-2021-41458
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability...
CVE-2021-33361
Memory leak in the afraboxread function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-33365
Memory leak in the gfisomgetrootod function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-33362
Stack buffer overflow in the hevcparsevpsextension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file...
CVE-2021-33366
Memory leak in the gfisomoinfreadentry function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file...
CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service DoS by uploading a malicious MP4 file...