GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4679 | 5.5 | Nov 15 | A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38 Affected: 2.3.0-dev |
| CVE-2024-6064 | 5.5 | Jun 17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master Affected: 2.5-dev-rev288-g11067ea92-master |
| CVE-2024-6063 | 5.5 | Jun 17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master Affected: 2.5-dev-rev288-g11067ea92-master |
| CVE-2024-6062 | 5.5 | Jun 17 | A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic Affected: 2.5-dev-rev288-g11067ea92-master |
| CVE-2024-6061 | 5.5 | Jun 17 | A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic Affected: 2.5-dev-rev288-g11067ea92-master |
| CVE-2023-50120 | 5.5 | Jan 10 | MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c Affected: 2.3 |
| CVE-2023-47465 | 5.5 | Dec 9 | An issue in GPAC v.2.2.1 and before allows a local attacker to cause a denial of service (DoS) via the ctts_box_read function of file src/isomedia/box_code_base.c Affected: through 2.2.1 |
| CVE-2023-48958 | 5.5 | Dec 7 | gpac 2.3-DEV-rev617-g671976fcc-master contains memory leaks in gf_mpd_resolve_url media_tools/mpd.c:4589 Affected: 2.3-dev-rev617-g671976fcc-master |
| CVE-2023-48039 | 5.5 | Nov 20 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75 Affected: 2.3-dev-rev617-g671976fcc-master |
| CVE-2023-47384 | 5.5 | Nov 14 | MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c Affected: 2.3-dev-rev617-g671976fcc-master |
| CVE-2023-46001 | 5.5 | Nov 7 | Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51… Affected: 2.3-dev-rev573-g201320819-master |
| CVE-2023-46928 | 5.5 | Nov 1 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42 Affected: 2.3-dev-rev605-gfc9e29089-master |
| CVE-2023-46927 | 5.5 | Nov 1 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box Affected: 2.3-dev-rev605-gfc9e29089-master |
| CVE-2023-46931 | 5.5 | Nov 1 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box Affected: 2.3-dev-rev605-gfc9e29089-master |
| CVE-2023-46930 | 5.5 | Nov 1 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14 Affected: 2.3-dev-rev605-gfc9e29089-master |
| CVE-2023-5595 | 5.5 | Oct 16 | Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: before 2.3.0 |
| CVE-2023-42298 | 5.5 | Oct 12 | An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c Affected: through 2.2.1 |
| CVE-2023-41000 | 5.5 | Sep 11 | GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c Affected: through 2.2.1 |
| CVE-2023-4778 | 5.5 | Sep 5 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3-dev |
| CVE-2023-4758 | 5.5 | Sep 4 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-4755 | 5.5 | Sep 4 | Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-4756 | 5.5 | Sep 4 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-4754 | 5.5 | Sep 4 | Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-4722 | 5.5 | Sep 1 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3-dev |
| CVE-2023-4721 | 5.5 | Sep 1 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3-dev |
| CVE-2023-4720 | 5.5 | Sep 1 | Floating Point Comparison with Incorrect Operator in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3-dev |
| CVE-2023-4683 | 5.5 | Aug 31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3-dev |
| CVE-2023-4682 | 5.5 | Aug 31 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-4681 | 5.5 | Aug 31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-4678 | 5.5 | Aug 31 | Divide By Zero in GitHub repository gpac/gpac prior to 2.3-DEV Affected: before 2.3 |
| CVE-2023-39562 | 5.5 | Aug 28 | GPAC v2.3-DEV-rev449-g5948e4f70-master was discovered to contain a heap-use-after-free via the gf_bs_align function at bitstream.c Affected: 2.3 |
| CVE-2023-37767 | 5.5 | Jul 11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so Affected: 2.3-dev-rev381-g817a848f6-master |
| CVE-2023-37766 | 5.5 | Jul 11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so Affected: 2.3-dev-rev381-g817a848f6-master |
| CVE-2023-37765 | 5.5 | Jul 11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so Affected: 2.3-dev-rev381-g817a848f6-master |
| CVE-2023-37174 | 5.5 | Jul 11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c Affected: 2.3-dev-rev381-g817a848f6-master |
| CVE-2023-2837 | 5.5 | May 22 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.2 |
| CVE-2023-0818 | 5.5 | Feb 13 | Off-by-one Error in GitHub repository gpac/gpac prior to v2.3.0-DEV Affected: before 2.3.0-dev |
| CVE-2023-23144 | 5.5 | Jan 20 | Integer overflow vulnerability in function Q_DecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master Affected: 2.2-rev0-gab012bbfb-master |
| CVE-2022-47662 | 5.5 | Jan 5 | GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample isomedia/media.c:662 Affected: before 2.2.0 |
| CVE-2022-47086 | 5.5 | Jan 5 | GPAC MP4Box v2.1-DEV-rev574-g9d5bb184b contains a segmentation violation via the function gf_sm_load_init_swf at scene_manager/swf_parse.c Affected: before 2.2.0 |
| CVE-2022-46490 | 5.5 | Jan 5 | GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c Affected: before 2.2.0 |
| CVE-2022-46489 | 5.5 | Jan 5 | GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c Affected: before 2.2.0 |
| CVE-2022-45204 | 5.5 | Nov 29 | GPAC v2.1-DEV-rev428-gcb8ae46c8-master was discovered to contain a memory leak via the function dimC_box_read at isomedia/box_code_3gpp.c Affected: before 2.2.0 |
| CVE-2022-43255 | 5.5 | Nov 2 | GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_odf_new_iod at odf/odf_code.c Affected: before 2.2.0 |
| CVE-2022-43254 | 5.5 | Nov 2 | GPAC v2.1-DEV-rev368-gfd054169b-master was discovered to contain a memory leak via the component gf_list_new at utils/list.c Affected: before 2.2.0 |
| CVE-2022-43039 | 5.5 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_meta_restore_items_ref at /isomedia/meta.c Affected: before 2.2.0 |
| CVE-2022-43044 | 5.5 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_isom_get_meta_item_info at /isomedia/meta.c Affected: before 2.2.0 |
| CVE-2022-43043 | 5.5 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function BD_CheckSFTimeOffset at /bifs/field_decode.c Affected: before 2.2.0 |
| CVE-2022-43045 | 5.5 | Oct 19 | GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a segmentation violation via the function gf_dump_vrml_sffield at /scene_manager/scene_dump.c Affected: before 2.2.0 |
| CVE-2022-3222 | 5.5 | Sep 15 | Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV Affected: before 2.1; 2.1 |
