GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46427 | 9.8 | Mar 9 | An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial of service (DoS), and obtain sensitive… Affected: 2.3-dev-rev588-g7edc40fee-master |
| CVE-2024-0321 | 9.8 | Jan 8 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3.0-dev |
| CVE-2023-46932 | 9.8 | Dec 9 | Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a denial of service (DoS) via str2ulong… Affected: 2.3-dev-rev617-g671976fcc-master |
| CVE-2023-2840 | 9.8 | May 22 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.1 |
| CVE-2022-36190 | 9.8 | Aug 17 | GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get Affected: before 2.2.0 |
| CVE-2022-1795 | 9.8 | May 18 | Use After Free in GitHub repository gpac/gpac prior to v2.1.0-DEV Affected: before 2.1.0 |
| CVE-2021-28300 | 9.8 | Apr 14 | NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by… Affected: 0.5.2 |
| CVE-2020-11558 | 9.8 | Apr 5 | An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box Affected: 0.8.0 |
| CVE-2018-13006 | 9.8 | Jun 29 | An issue was discovered in MP4Box in GPAC 0.7.1 Affected: 0.7.1 |
| CVE-2018-13005 | 9.8 | Jun 29 | An issue was discovered in MP4Box in GPAC 0.7.1 Affected: 0.7.1 |
| CVE-2024-0322 | 9.1 | Jan 8 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3.0; 2.3.0 |
| CVE-2023-2838 | 9.1 | May 22 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.2 |
| CVE-2020-19751 | 9.1 | Sep 7 | An issue was discovered in gpac 0.8.0 Affected: 0.8.0 |
| CVE-2023-46426 | 8.8 | Mar 9 | Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS)… Affected: 2.3-dev-rev588-g7edc40fee-master |
| CVE-2023-0841 | 8.8 | Feb 15 | A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded Affected: 2.3-dev-rev40-g3602a5ded |
| CVE-2022-4202 | 8.8 | Nov 29 | A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master Affected: 2.1-dev-rev490-g68064e101-master |
| CVE-2021-21850 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21849 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21848 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21842 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21841 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21840 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21836 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21835 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21834 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21862 | 8.8 | Aug 18 | Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21858 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21857 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21856 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21855 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21854 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21853 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21852 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21851 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21847 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21846 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21845 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21844 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21843 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21839 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21838 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21837 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21861 | 8.8 | Aug 16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21860 | 8.8 | Aug 16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21859 | 8.8 | Aug 16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2025-25723 | 8.4 | Feb 28 | Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code Affected: 2.5 |
| CVE-2025-70298 | 8.2 | Jan 15 | GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function Affected: 2.4.0 |
| CVE-2025-60464 | 7.8 | Jun 25 | A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS)… Affected: before 26.02.0 |
| CVE-2026-33144 | 7.8 | Mar 20 | GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing) Affected: < 86b0e36ea4c71402fbdaf7e13d73ba8841003e72 |
| CVE-2026-27821 | 7.8 | Feb 26 | GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow Affected: <= 26.02.0 |