GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-32134 | 5.5 | Sep 13 | The gf_odf_desc_copy function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-32440 | 5.5 | Aug 11 | The Media_RewriteODFrame function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-32438 | 5.5 | Aug 11 | The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-32437 | 5.5 | Aug 11 | The gf_hinter_finalize function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-36584 | 5.5 | Aug 5 | An issue was discovered in GPAC 1.0.1 Affected: 1.0.1 |
| CVE-2020-24829 | 5.5 | Aug 4 | An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box Affected: 0.5.2 through 0.8.0 |
| CVE-2020-22352 | 5.5 | Aug 4 | The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 0.8.0 |
| CVE-2020-19488 | 5.5 | Jul 21 | An issue was discovered in box_code_apple.c:119 in Gpac MP4Box 0.8.0, allows attackers to cause a Denial of Service due to an invalid read on function ilst_item_Read Affected: 0.8.0 |
| CVE-2020-19481 | 5.5 | Jul 21 | An issue was discovered in GPAC before 0.8.0, as demonstrated by MP4Box Affected: before 0.8.0 |
| CVE-2020-23932 | 5.5 | Apr 21 | An issue was discovered in gpac before 1.0.1 Affected: before 1.0.1 |
| CVE-2020-23930 | 5.5 | Apr 21 | An issue was discovered in gpac through 20200801 Affected: before 1.0.1 |
| CVE-2021-30199 | 5.5 | Apr 19 | In filters/reframe_latm.c in GPAC 1.0.1 there is a Null Pointer Dereference, when gf_filter_pck_get_data is called Affected: 1.0.1 |
| CVE-2021-30022 | 5.5 | Apr 19 | There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1 Affected: 0.5.2 through 1.0.1 |
| CVE-2021-30020 | 5.5 | Apr 19 | In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than… Affected: 1.0.1 |
| CVE-2021-30019 | 5.5 | Apr 19 | In the adts_dmx_process function in filters/reframe_adts.c in GPAC 1.0.1, a crafted file may cause ctx->hdr.frame_size to be smaller than ctx->hdr.hdr_size, resulting in size to… Affected: 1.0.1 |
| CVE-2021-30015 | 5.5 | Apr 19 | There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1 Affected: 1.0.1 |
| CVE-2021-30014 | 5.5 | Apr 19 | There is a integer overflow in media_tools/av_parsers.c in the hevc_parse_slice_segment function in GPAC from v0.9.0-preview to 1.0.1 which results in a crash Affected: 0.9.0 through 1.0.1 |
| CVE-2021-31262 | 5.5 | Apr 19 | The AV1_DuplicateConfig function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-31261 | 5.5 | Apr 19 | The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-31260 | 5.5 | Apr 19 | The MergeTrack function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-31259 | 5.5 | Apr 19 | The gf_isom_cenc_get_default_info_internal function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-31258 | 5.5 | Apr 19 | The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-31257 | 5.5 | Apr 19 | The HintFile function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command Affected: 1.0.1 |
| CVE-2021-31256 | 5.5 | Apr 19 | Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file Affected: 1.0.1 |
| CVE-2019-20632 | 5.5 | Mar 24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box Affected: before 0.8.0 |
| CVE-2019-20631 | 5.5 | Mar 24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box Affected: before 0.8.0 |
| CVE-2019-20630 | 5.5 | Mar 24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box Affected: before 0.8.0 |
| CVE-2019-20629 | 5.5 | Mar 24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box Affected: before 0.8.0 |
| CVE-2019-20628 | 5.5 | Mar 24 | An issue was discovered in libgpac.a in GPAC before 0.8.0, as demonstrated by MP4Box Affected: before 0.8.0 |
| CVE-2020-6631 | 5.5 | Jan 9 | An issue was discovered in GPAC version 0.8.0 Affected: 0.8.0 |
| CVE-2020-6630 | 5.5 | Jan 9 | An issue was discovered in GPAC version 0.8.0 Affected: 0.8.0 |
| CVE-2019-20208 | 5.5 | Jan 2 | dimC_Read in isomedia/box_code_3gpp.c in GPAC from 0.5.2 to 0.8.0 has a stack-based buffer overflow Affected: 0.5.2 through 0.8.0 |
| CVE-2019-20171 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109 Affected: 0.5.2 through 0.8.0; 0.9.0 |
| CVE-2019-20170 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20169 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20168 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20167 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20166 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20165 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20164 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20163 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20162 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20161 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20160 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20159 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-12481 | 5.5 | May 30 | An issue was discovered in GPAC 0.7.1 Affected: 0.6.1 through 0.7.1 |
| CVE-2026-90793 | 5.4 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_get_name use after free Affected: f1219cde |
| CVE-2026-92475 | 5.3 | Sep 16 | GPAC downloader.c wait_for_header_and_parse out-of-bounds Affected: 26.08-DEV |
| CVE-2026-90686 | 5.3 | Sep 14 | GPAC MP4Box loader_bt.c gf_bt_report memory corruption Affected: f1219cde |
| CVE-2026-90578 | 5.3 | Sep 13 | GPAC MP4Box list.c gf_list_count use after free Affected: f1219cde |