GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-20163 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20162 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20161 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20160 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-20159 | 5.5 | Dec 31 | An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109 Affected: 0.8.0; 0.9.0 |
| CVE-2019-12481 | 5.5 | May 30 | An issue was discovered in GPAC 0.7.1 Affected: 0.6.1 through 0.7.1 |
| CVE-2026-90793 | 5.4 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_get_name use after free Affected: f1219cde |
| CVE-2026-92475 | 5.3 | Sep 16 | GPAC downloader.c wait_for_header_and_parse out-of-bounds Affected: 26.08-DEV |
| CVE-2026-90686 | 5.3 | Sep 14 | GPAC MP4Box loader_bt.c gf_bt_report memory corruption Affected: f1219cde |
| CVE-2026-90578 | 5.3 | Sep 13 | GPAC MP4Box list.c gf_list_count use after free Affected: f1219cde |
| CVE-2026-90577 | 5.3 | Sep 13 | GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow Affected: f1219cde |
| CVE-2026-7135 | 5.3 | Apr 27 | GPAC MP4Box box_code_base.c elng_box_read out-of-bounds Affected: 26.03-DEV-rev105-g8f39a1eb3-master |
| CVE-2026-4016 | 5.3 | Mar 12 | GPAC SVG Parser load_svg.c svgin_process out-of-bounds write Affected: 26.03-DEV |
| CVE-2026-4015 | 5.3 | Mar 12 | GPAC TeXML File load_text.c txtin_process_texml stack-based overflow Affected: 26.03-DEV |
| CVE-2025-7797 | 5.3 | Jul 18 | GPAC dash_client.c gf_dash_download_init_segment null pointer dereference Affected: through 2.4.0 |
| CVE-2023-46871 | 5.3 | Dec 7 | GPAC version 2.3-DEV-rev602-ged8424300-master in MP4Box contains a memory leak in NewSFDouble scenegraph/vrml_tools.c:300 Affected: through 2.3-dev-rev602-ged8424300-master |
| CVE-2025-60466 | 5.0 | Jun 24 | A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via… Affected: before 26.02.0 |
| CVE-2022-1172 | 5.0 | Mar 30 | Null Pointer Dereference Caused Segmentation Fault in GitHub repository gpac/gpac prior to 2.1.0-DEV Affected: through 2.0.0 |
| CVE-2026-91088 | 4.8 | Sep 15 | GPAC URL url.c gf_url_concatenate_ex heap-based overflow Affected: f1219cde |
| CVE-2026-91091 | 4.3 | Sep 15 | GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption Affected: f1219cde |
| CVE-2026-90792 | 4.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference Affected: f1219cde |
| CVE-2026-91090 | 3.9 | Sep 15 | GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow Affected: f1219cde |
| CVE-2026-92474 | 3.3 | Sep 16 | GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free Affected: 26.08-DEV |
| CVE-2026-92473 | 3.3 | Sep 16 | GPAC BIFS commands.c gf_sg_command_del use after free Affected: 26.08-DEV |
| CVE-2026-92472 | 3.3 | Sep 16 | GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free Affected: 26.08-DEV |
| CVE-2026-90827 | 3.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free Affected: 26.07.0 |
| CVE-2026-90825 | 3.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_unregister use after free Affected: 26.07.0 |
| CVE-2026-90824 | 3.3 | Sep 14 | GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow Affected: 26.07.0 |
| CVE-2026-90683 | 3.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_unregister assertion Affected: f1219cde |
| CVE-2026-90613 | 3.3 | Sep 14 | GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion Affected: f1219cde |
| CVE-2026-90612 | 3.3 | Sep 14 | GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion Affected: f1219cde |
| CVE-2026-90611 | 3.3 | Sep 14 | GPAC MP4Box loader_xmt.c xmt_parse_element assertion Affected: f1219cde |
| CVE-2026-90610 | 3.3 | Sep 14 | GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read Affected: f1219cde |
| CVE-2026-90609 | 3.3 | Sep 14 | GPAC MP4Box vrml_tools.c null pointer dereference Affected: f1219cde |
| CVE-2026-90576 | 3.3 | Sep 13 | GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference Affected: f1219cde |
| CVE-2026-90573 | 3.3 | Sep 13 | GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference Affected: f1219cde |
| CVE-2026-15185 | 3.3 | Jul 9 | GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds Affected: 26.03-DEV |
| CVE-2025-15668 | 3.3 | Jul 6 | GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow Affected: b40ce70f5 |
| CVE-2025-15667 | 3.3 | Jul 6 | GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free Affected: 2.5-DEV |
| CVE-2026-14801 | 3.3 | Jul 6 | GPAC TeXML File load_text.c txtin_probe_duration divide by zero Affected: 26.03-DEV-rev342-g80071f700-master |
| CVE-2026-14790 | 3.3 | Jul 6 | GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference Affected: 26.02.0 |
| CVE-2026-13523 | 3.3 | Jun 29 | GPAC ISOBMFF base_encoding.c data amplification Affected: 26.02 |
| CVE-2026-9567 | 3.3 | May 26 | GPAC MP4Box isom_intern.c MergeFragment null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2026-1417 | 3.3 | Jan 26 | GPAC filedump.c dump_isom_rtp null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2026-1416 | 3.3 | Jan 26 | GPAC filedump.c DumpMovieInfo null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2026-1415 | 3.3 | Jan 26 | GPAC media_export.c gf_media_export_webvtt_metadata null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2023-3291 | 3.3 | Jun 16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.2 |
| CVE-2026-90826 | 2.8 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds Affected: 26.07.0 |
| CVE-2026-90685 | 2.8 | Sep 14 | GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion Affected: f1219cde |
| CVE-2026-90684 | 2.8 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion Affected: f1219cde |