GP
Product
gpac
450
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 13High 147Medium 261Low 29
Watch
Add gpac to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-91090 | 3.9 | Sep 15 | GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow Affected: f1219cde |
| CVE-2026-92474 | 3.3 | Sep 16 | GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free Affected: 26.08-DEV |
| CVE-2026-92473 | 3.3 | Sep 16 | GPAC BIFS commands.c gf_sg_command_del use after free Affected: 26.08-DEV |
| CVE-2026-92472 | 3.3 | Sep 16 | GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free Affected: 26.08-DEV |
| CVE-2026-90827 | 3.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free Affected: 26.07.0 |
| CVE-2026-90825 | 3.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_unregister use after free Affected: 26.07.0 |
| CVE-2026-90824 | 3.3 | Sep 14 | GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow Affected: 26.07.0 |
| CVE-2026-90683 | 3.3 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_unregister assertion Affected: f1219cde |
| CVE-2026-90613 | 3.3 | Sep 14 | GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion Affected: f1219cde |
| CVE-2026-90612 | 3.3 | Sep 14 | GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion Affected: f1219cde |
| CVE-2026-90611 | 3.3 | Sep 14 | GPAC MP4Box loader_xmt.c xmt_parse_element assertion Affected: f1219cde |
| CVE-2026-90610 | 3.3 | Sep 14 | GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read Affected: f1219cde |
| CVE-2026-90609 | 3.3 | Sep 14 | GPAC MP4Box vrml_tools.c null pointer dereference Affected: f1219cde |
| CVE-2026-90576 | 3.3 | Sep 13 | GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference Affected: f1219cde |
| CVE-2026-90573 | 3.3 | Sep 13 | GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference Affected: f1219cde |
| CVE-2026-15185 | 3.3 | Jul 9 | GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds Affected: 26.03-DEV |
| CVE-2025-15668 | 3.3 | Jul 6 | GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow Affected: b40ce70f5 |
| CVE-2025-15667 | 3.3 | Jul 6 | GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free Affected: 2.5-DEV |
| CVE-2026-14801 | 3.3 | Jul 6 | GPAC TeXML File load_text.c txtin_probe_duration divide by zero Affected: 26.03-DEV-rev342-g80071f700-master |
| CVE-2026-14790 | 3.3 | Jul 6 | GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference Affected: 26.02.0 |
| CVE-2026-13523 | 3.3 | Jun 29 | GPAC ISOBMFF base_encoding.c data amplification Affected: 26.02 |
| CVE-2026-9567 | 3.3 | May 26 | GPAC MP4Box isom_intern.c MergeFragment null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2026-1417 | 3.3 | Jan 26 | GPAC filedump.c dump_isom_rtp null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2026-1416 | 3.3 | Jan 26 | GPAC filedump.c DumpMovieInfo null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2026-1415 | 3.3 | Jan 26 | GPAC media_export.c gf_media_export_webvtt_metadata null pointer dereference Affected: 2.0; 2.1; 2.2; 2.3; 2.4.0 |
| CVE-2023-3291 | 3.3 | Jun 16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2 Affected: before 2.2.2 |
| CVE-2026-90826 | 2.8 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds Affected: 26.07.0 |
| CVE-2026-90685 | 2.8 | Sep 14 | GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion Affected: f1219cde |
| CVE-2026-90684 | 2.8 | Sep 14 | GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion Affected: f1219cde |
Showing 29