CVE-2026-33144

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow write vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gfxmlparsebitsequencebs function in utils/xmlbincustom.c when processing a crafted NHML file containing malicious...

PT-2026-4718

Name of the Vulnerable Software and Affected Versions GPAC versions up to 2.4.0 Description A flaw exists in GPAC where manipulation of the Name argument within the gf media export webvtt metadata function, located in the src/media tools/media export.c file, can lead to a null pointer dereference...

GPAC MP4Box security vulnerability

GPAC MP4Box is multimedia packager. It is mainly used to work with ISOBMF files e.g. MP4, 3GP but can also be used to import/export media from container files such as AVI, MPG, MKV, MPEG-2 TS. A security vulnerability exists in GPAC MP4Box version 2.1-DEV-rev617-g85ce76efd, which stems from a...