GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-46426 | 8.8 | Mar 9 | Heap-based Buffer Overflow vulnerability in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code and cause a denial of service (DoS)… Affected: 2.3-dev-rev588-g7edc40fee-master |
| CVE-2023-0841 | 8.8 | Feb 15 | A vulnerability, which was classified as critical, has been found in GPAC 2.3-DEV-rev40-g3602a5ded Affected: 2.3-dev-rev40-g3602a5ded |
| CVE-2022-4202 | 8.8 | Nov 29 | A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master Affected: 2.1-dev-rev490-g68064e101-master |
| CVE-2021-21850 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21849 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21848 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21842 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21841 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21840 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21836 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21835 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21834 | 8.8 | Aug 25 | An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21862 | 8.8 | Aug 18 | Multiple exploitable integer truncation vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21858 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21857 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21856 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21855 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21854 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21853 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21852 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21851 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21847 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21846 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21845 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21844 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21843 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21839 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21838 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21837 | 8.8 | Aug 18 | Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21861 | 8.8 | Aug 16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21860 | 8.8 | Aug 16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2021-21859 | 8.8 | Aug 16 | An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1 Affected: 1.0.1 |
| CVE-2025-25723 | 8.4 | Feb 28 | Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code Affected: 2.5 |
| CVE-2025-70298 | 8.2 | Jan 15 | GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function Affected: 2.4.0 |
| CVE-2025-60464 | 7.8 | Jun 25 | A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS)… Affected: before 26.02.0 |
| CVE-2026-33144 | 7.8 | Mar 20 | GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing) Affected: < 86b0e36ea4c71402fbdaf7e13d73ba8841003e72 |
| CVE-2026-27821 | 7.8 | Feb 26 | GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow Affected: <= 26.02.0 |
| CVE-2026-1418 | 7.8 | Jan 26 | GPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds write Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2024-50664 | 7.8 | Jan 23 | gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box Affected: 2.4 |
| CVE-2024-22749 | 7.8 | Jan 25 | GPAC v2.3 was detected to contain a buffer overflow via the function gf_isom_new_generic_sample_description function in the isomedia/isom_write.c:4577 Affected: 2.3 |
| CVE-2023-48014 | 7.8 | Nov 15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a stack overflow via the hevc_parse_vps_extension function at /media_tools/av_parsers.c Affected: 2.3-dev-rev566-g50c2ab06f-master |
| CVE-2023-48013 | 7.8 | Nov 15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a double free via the gf_filterpacket_del function at /gpac/src/filter_core/filter.c Affected: 2.3-dev-rev566-g50c2ab06f-master |
| CVE-2023-48011 | 7.8 | Nov 15 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c Affected: 2.3-dev-rev566-g50c2ab06f-master |
| CVE-2023-5586 | 7.8 | Oct 15 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV Affected: before 2.3.0 |
| CVE-2023-3012 | 7.8 | May 31 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.2 |
| CVE-2023-1654 | 7.8 | Mar 27 | Denial of Service in GitHub repository gpac/gpac prior to 2.4.0 Affected: through 2.2.0 |
| CVE-2023-1655 | 7.8 | Mar 27 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0 Affected: before 2.4.0 |
| CVE-2023-1452 | 7.8 | Mar 17 | A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master Affected: 2.3 |
| CVE-2023-1449 | 7.8 | Mar 17 | A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic Affected: 2.3 |
| CVE-2023-1448 | 7.8 | Mar 17 | A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master Affected: 2.3 |