GP
Product
gpac
by gpac · last CVE Oct 13, 2026
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch

Add gpac to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-0866
7.8
0%
Feb 16
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV
Affected: through 2.2.0
CVE-2023-0819
7.8
0%
Feb 13
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to v2.3.0-DEV
Affected: before 2.3.0-dev
CVE-2023-0817
7.8
0%
Feb 13
Buffer Over-read in GitHub repository gpac/gpac prior to v2.3.0-DEV
Affected: before 2.3.0-dev
CVE-2023-0770
7.8
0%
Feb 9
Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2
Affected: before 2.2.0
CVE-2023-0760
7.8
0%
Feb 9
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to V2.1.0-DEV
Affected: before 2.2.0
CVE-2023-23145
7.8
0%
Jan 20
GPAC version 2.2-rev0-gab012bbfb-master was discovered to contain a memory leak in lsr_read_rare_full function
Affected: 2.2-rev0-gab012bbfb-master
CVE-2023-23143
7.8
0%
Jan 20
Buffer overflow vulnerability in function avc_parse_slice in file media_tools/av_parsers.c
Affected: 2.3-dev-rev1-g4669ba229-master
CVE-2023-0358
7.8
0%
Jan 18
Use After Free in GitHub repository gpac/gpac prior to 2.3.0-DEV
Affected: through 2.2.0
CVE-2022-47663
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609
Affected: before 2.2.0
CVE-2022-47661
7.8
0%
Jan 5
GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 is vulnerable to Buffer Overflow via media_tools/av_parsers.c:4988 in gf_media_nalu_add_emulation_bytes
Affected: before 2.2.0
CVE-2022-47660
7.8
0%
Jan 5
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c
Affected: before 2.2.0
CVE-2022-47659
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to Buffer Overflow in gf_bs_read_data
Affected: before 2.2.0
CVE-2022-47658
7.8
0%
Jan 5
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039
Affected: before 2.2.0
CVE-2022-47657
7.8
0%
Jan 5
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662
Affected: before 2.2.0
CVE-2022-47656
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev617-g85ce76efd is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8273
Affected: before 2.2.0
CVE-2022-47654
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in gf_hevc_read_sps_bs_internal function of media_tools/av_parsers.c:8261
Affected: before 2.2.0
CVE-2022-47653
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev593-g007bf61a0 is vulnerable to Buffer Overflow in eac3_update_channels function of media_tools/av_parsers.c:9113
Affected: before 2.2.0
CVE-2022-47095
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer overflow in hevc_parse_vps_extension function of media_tools/av_parsers.c
Affected: before 2.2.0
CVE-2022-47094
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid
Affected: before 2.2.0
CVE-2022-47093
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to heap use-after-free via filters/dmx_m2ts.c:470 in m2tsdmx_declare_pid
Affected: before 2.2.0
CVE-2022-47091
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow in gf_text_process_sub function of filters/load_text.c
Affected: before 2.2.0
CVE-2022-47089
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow via gf_vvc_read_sps_bs_internal function of media_tools/av_parsers.c
Affected: before 2.2.0
CVE-2022-47088
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Buffer Overflow
Affected: before 2.2.0
CVE-2022-47087
7.8
0%
Jan 5
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c
Affected: before 2.2.0
CVE-2022-45283
7.8
0%
Dec 6
GPAC MP4box v2.0.0 was discovered to contain a stack overflow in the smil_parse_time_list parameter at /scenegraph/svg_attributes.c
Affected: 2.0.0
CVE-2022-45343
7.8
0%
Nov 29
GPAC v2.1-DEV-rev478-g696e6f868-master was discovered to contain a heap use-after-free via the Q_IsTypeOn function at /gpac/src/bifs/unquantize.c
Affected: before 2.2.0
CVE-2022-45202
7.8
0%
Nov 29
GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a stack overflow via the function dimC_box_read at isomedia/box_code_3gpp.c
Affected: before 2.2.0
CVE-2022-43040
7.8
0%
Oct 19
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c
Affected: before 2.2.0
CVE-2022-43042
7.8
0%
Oct 19
GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function FixSDTPInTRAF at isomedia/isom_intern.c
Affected: before 2.2.0
CVE-2022-3178
7.8
0%
Sep 12
Buffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV
Affected: before 2.1.0-dev
CVE-2022-38530
7.8
0%
Sep 6
GPAC v2.1-DEV-rev232-gfcaa01ebb-master was discovered to contain a stack overflow when processing ISOM_IOD
Affected: before 2.2.0
CVE-2022-2454
7.8
0%
Jul 19
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV
Affected: through 2.0.0
CVE-2022-2453
7.8
0%
Jul 19
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV
Affected: through 2.0.0
CVE-2022-1441
7.8
1%
Apr 25
MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion
Affected: 2.0.0
CVE-2022-24578
7.8
1%
Mar 14
GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c
Affected: 1.0.1
CVE-2022-24577
7.8
1%
Mar 14
GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen
Affected: 1.0.1
CVE-2022-24575
7.8
1%
Mar 14
GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box
Affected: 1.0.1
CVE-2022-26967
7.8
1%
Mar 12
GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode
Affected: 2.0
CVE-2021-40574
7.8
1%
Jan 13
The binary MP4Box in Gpac from 0.9.0-preview to 1.0.1 has a double-free vulnerability in the gf_text_get_utf8_line function in load_text.c, which allows attackers to cause a…
Affected: 0.9.0 through 1.0.1
CVE-2021-40571
7.8
1%
Jan 13
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the ilst_box_read function in box_code_apple.c, which allows attackers to cause a denial of service, even code…
Affected: 1.0.1
CVE-2021-40570
7.8
1%
Jan 13
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avc_compute_poc function in av_parsers.c, which allows attackers to cause a denial of service, even code…
Affected: 1.0.1
CVE-2021-40568
7.8
1%
Jan 13
A buffer overflow vulnerability exists in Gpac through 1.0.1 via a malformed MP4 file in the svc_parse_slice function in av_parsers.c, which allows attackers to cause a denial of…
Affected: through 1.0.1
CVE-2021-36417
7.8
1%
Jan 12
A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via…
Affected: 1.0.1
CVE-2021-36414
7.8
1%
Jan 10
A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted…
Affected: 1.0.1
CVE-2021-36412
7.8
1%
Jan 10
A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified…
Affected: 1.0.1
CVE-2021-32271
7.8
1%
Sep 20
An issue was discovered in gpac through 20200801
Affected: before 1.0.1
CVE-2021-32268
7.8
1%
Sep 20
Buffer overflow vulnerability in function gf_fprintf in os_file.c in gpac before 1.0.1 allows attackers to execute arbitrary code
Affected: before 1.0.1
CVE-2021-33362
7.8
1%
Sep 13
Stack buffer overflow in the hevc_parse_vps_extension function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file
Affected: 1.0.1
CVE-2021-32136
7.8
1%
Sep 13
Heap buffer overflow in the print_udta function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file
Affected: 1.0.1
CVE-2021-32439
7.8
1%
Aug 11
Buffer overflow in the stbl_AppendSize function in MP4Box in GPAC 1.0.1 allows attackers to cause a denial of service or execute arbitrary code via a crafted file
Affected: 1.0.1
Page 2 of 3 · 147 total