ROS-20260911-73-0007

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after it is freed during processing an incorrect XMT scene, allows a perpetrator to cause a service failure...

ROS-20260911-73-0016

The vulnerability of the gfnodeunregister function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260910-73-0087

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after deallocation during processing of an incorrect XMT scene, allows a perpetrator to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfisomvpconfignew function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

MP4Box gf_cenc_set_pssh Heap Buffer Overflow DoS

The vulnerability of the gfcencsetpssh function in the MP4Box utility of the GPAC multimedia platform involves copying buffers without checking the size of the input data. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfisomgetuserdatacount function in the MP4Box utility of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gfodfac4cfgdsiv1 function in the MP4Box utility of the GPAC multimedia platform is related to the assignment of a zero pointer during the processing of AC4 audio streams. Exploiting this vulnerability can allow an attacker to cause a service failure...

MP4Box Heap Buffer Overflow DoS

The vulnerability of the gffilterpidgetpacket function in the MP4Box utility of the GPAC multimedia platform is related to the pointer being set to an expired value. Exploiting this vulnerability could allow a attacker to cause service failures or execute arbitrary code...

PT-2025-28196 · Gnu +1 · Gpac +1

Уязвимость функции gf scene ns connect object compositor/scene ns.c утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием указателей при обработке XMT-файлов. Эксплуатация уязвимости может позволить нарушителю выполнить произвольный код или вызвать отказ в обслуживании...

PT-2025-34087 · Gnu +1 · Gpac +1

Уязвимость функции stbl AddSize утилиты MP4Box мультимедийной платформы GPAC связана с переполнением буфера в динамической памяти. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, вызвать отказ в обслуживании или выполнить произвольный код...

PT-2025-34082 · Gnu +1 · Gpac +1

Уязвимость функции DumpMovieInfo утилиты MP4Box мультимедийной платформы GPAC связана с разыменованием нулевого указателя. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS : GPAC vulnerabilities (USN-7320-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-7320-1 advisory. It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which...

USN-7320-1: GPAC vulnerabilities

It was discovered that the GPAC MP4Box utility incorrectly handled certain AC3 files, which could lead to an out-of-bounds read. A remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service system crash. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24....

MGASA-2019-0146 Updated gpac packages fix security vulnerability

It was discovered that the GPAC MP4Box utility incorrectly handled certain memory operations. If an user or automated system were tricked into opening a specially crafted MP4 file, a remote attacker could use this issue to cause MP4Box to crash, resulting in a denial of service, or possibly execu...