GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1418 | 7.8 | Jan 26 | GPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds write Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2024-50664 | 7.8 | Jan 23 | gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box Affected: 2.4 |
| CVE-2024-22749 | 7.8 | Jan 25 | GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577 Affected: 2.3 |
| CVE-2023-48014 | 7.8 | Nov 15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c Affected: 2.3-dev-rev566-g50c2ab06f-master |
| CVE-2023-48013 | 7.8 | Nov 15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c Affected: 2.3-dev-rev566-g50c2ab06f-master |
| CVE-2023-48011 | 7.8 | Nov 15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c Affected: 2.3-dev-rev566-g50c2ab06f-master |
| CVE-2023-5586 | 7.8 | Oct 15 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: before 2.3.0 |
| CVE-2023-3012 | 7.8 | May 31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.2 |
| CVE-2023-1654 | 7.8 | Mar 27 | Denial of Service in GitHub repository gpac/gpac prior to 2.4.0 Affected: through 2.2.0 |
| CVE-2023-1655 | 7.8 | Mar 27 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0 Affected: before 2.4.0 |
| CVE-2023-1452 | 7.8 | Mar 17 | A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master Affected: 2.3 |
| CVE-2023-1449 | 7.8 | Mar 17 | A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic Affected: 2.3 |
| CVE-2023-1448 | 7.8 | Mar 17 | A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master Affected: 2.3 |
| CVE-2023-0866 | 7.8 | Feb 16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: through 2.2.0 |
| CVE-2023-0819 | 7.8 | Feb 13 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV Affected: before 2.3.0-dev |
| CVE-2023-0817 | 7.8 | Feb 13 | Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV Affected: before 2.3.0-dev |
| CVE-2023-0770 | 7.8 | Feb 9 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2 Affected: before 2.2.0 |
| CVE-2023-0760 | 7.8 | Feb 9 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV Affected: before 2.2.0 |
| CVE-2023-23145 | 7.8 | Jan 20 | GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function Affected: 2.2-rev0-gab012bbfb-master |
| CVE-2023-23143 | 7.8 | Jan 20 | Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c Affected: 2.3-dev-rev1-g4669ba229-master |
| CVE-2023-0358 | 7.8 | Jan 18 | Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: through 2.2.0 |
| CVE-2022-47663 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609 Affected: before 2.2.0 |
| CVE-2022-47661 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes Affected: before 2.2.0 |
| CVE-2022-47660 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c Affected: before 2.2.0 |
| CVE-2022-47659 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data Affected: before 2.2.0 |
| CVE-2022-47658 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039 Affected: before 2.2.0 |
| CVE-2022-47657 | 7.8 | Jan 5 | GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662 Affected: before 2.2.0 |
| CVE-2022-47656 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273 Affected: before 2.2.0 |
| CVE-2022-47654 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261 Affected: before 2.2.0 |
| CVE-2022-47653 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113 Affected: before 2.2.0 |
| CVE-2022-47095 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c Affected: before 2.2.0 |
| CVE-2022-47094 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid Affected: before 2.2.0 |
| CVE-2022-47093 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid Affected: before 2.2.0 |
| CVE-2022-47091 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c Affected: before 2.2.0 |
| CVE-2022-47089 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c Affected: before 2.2.0 |
| CVE-2022-47088 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow Affected: before 2.2.0 |
| CVE-2022-47087 | 7.8 | Jan 5 | GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c Affected: before 2.2.0 |
| CVE-2022-45283 | 7.8 | Dec 6 | GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c Affected: 2.0.0 |
| CVE-2022-45343 | 7.8 | Nov 29 | GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c Affected: before 2.2.0 |
| CVE-2022-45202 | 7.8 | Nov 29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c Affected: before 2.2.0 |
| CVE-2022-43040 | 7.8 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c Affected: before 2.2.0 |
| CVE-2022-43042 | 7.8 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c Affected: before 2.2.0 |
| CVE-2022-3178 | 7.8 | Sep 12 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV Affected: before 2.1.0-dev |
| CVE-2022-38530 | 7.8 | Sep 6 | GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD Affected: before 2.2.0 |
| CVE-2022-2454 | 7.8 | Jul 19 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV Affected: through 2.0.0 |
| CVE-2022-2453 | 7.8 | Jul 19 | Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV Affected: through 2.0.0 |
| CVE-2022-1441 | 7.8 | Apr 25 | MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion Affected: 2.0.0 |
| CVE-2022-24578 | 7.8 | Mar 14 | GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c Affected: 1.0.1 |
| CVE-2022-24577 | 7.8 | Mar 14 | GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen Affected: 1.0.1 |
| CVE-2022-24575 | 7.8 | Mar 14 | GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box Affected: 1.0.1 |
