Login Request a demo
GP
Vendor
gpac
2 products with CVEs on record
454
CVEs
0
On KEV
4
New 30D
Products
GP
gpac
gpac
9.8
450 CVEs0 on KEV4 new
MP
Mp4box
Gpac
7.5
4 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-109827
GP
GPAC
Gpac
6.3
0%
Oct 13GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
CVE-2026-108539
GP
GPAC
Gpac
6.3
0%
Oct 11GPAC MP4Box filter_queue.c gf_fq_pop use after free
CVE-2026-108538
GP
GPAC
Gpac
6.3
0%
Oct 11GPAC MP4Box os_thread.c gf_mx_v use after free
CVE-2026-103227
GP
GPAC
Gpac
6.3
0%
Sep 30GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow
CVE-2026-93331
GP
GPAC
Gpac
7.3
1%
Sep 18GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds
CVE-2026-92475
GP
GPAC
Gpac
5.3
0%
Sep 16GPAC downloader.c wait_for_header_and_parse out-of-bounds
CVE-2026-92474
GP
GPAC
Gpac
3.3
0%
Sep 16GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free
CVE-2026-92473
GP
GPAC
Gpac
3.3
0%
Sep 16GPAC BIFS commands.c gf_sg_command_del use after free
CVE-2026-92472
GP
GPAC
Gpac
3.3
0%
Sep 16GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
CVE-2026-92399
GP
GPAC
Gpac
7.3
1%
Sep 16GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow
CVE-2026-91091
GP
GPAC
Gpac
4.3
1%
Sep 15GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption
CVE-2026-91090
GP
GPAC
Gpac
3.9
0%
Sep 15GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow
CVE-2026-91089
GP
GPAC
Gpac
6.3
1%
Sep 15GPAC base_scenegraph.c gf_node_get_name_and_id use after free
CVE-2026-91088
GP
GPAC
Gpac
4.8
0%
Sep 15GPAC URL url.c gf_url_concatenate_ex heap-based overflow
CVE-2026-91087
GP
GPAC
Gpac
7.3
1%
Sep 15GPAC Compositor media_object.c gf_mo_get_od_id use after free
CVE-2026-91086
GP
GPAC
Gpac
6.3
1%
Sep 15GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow
CVE-2026-90827
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
CVE-2026-90826
GP
GPAC
Gpac
2.8
0%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds
CVE-2026-90825
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_unregister use after free
CVE-2026-90824
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow
CVE-2026-90794
GP
GPAC
Gpac
6.3
1%
Sep 14GPAC MP4Box vrml_tools.c gf_sg_script_load use after free
CVE-2026-90793
GP
GPAC
Gpac
5.4
1%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_get_name use after free
CVE-2026-90792
GP
GPAC
Gpac
4.3
1%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference
CVE-2026-90791
GP
GPAC
Gpac
6.3
1%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_unregister use after free
CVE-2026-90687
GP
GPAC
Gpac
6.3
1%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free
CVE-2026-90686
GP
GPAC
Gpac
5.3
1%
Sep 14GPAC MP4Box loader_bt.c gf_bt_report memory corruption
CVE-2026-90685
GP
GPAC
Gpac
2.8
0%
Sep 14GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion
CVE-2026-90684
GP
GPAC
Gpac
2.8
0%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion
CVE-2026-90683
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box base_scenegraph.c gf_node_unregister assertion
CVE-2026-90613
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion
CVE-2026-90612
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion
CVE-2026-90611
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box loader_xmt.c xmt_parse_element assertion
CVE-2026-90610
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read
CVE-2026-90609
GP
GPAC
Gpac
3.3
0%
Sep 14GPAC MP4Box vrml_tools.c null pointer dereference
CVE-2026-90578
GP
GPAC
Gpac
5.3
0%
Sep 13GPAC MP4Box list.c gf_list_count use after free
CVE-2026-90577
GP
GPAC
Gpac
5.3
0%
Sep 13GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow
CVE-2026-90576
GP
GPAC
Gpac
3.3
0%
Sep 13GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference
CVE-2026-90573
GP
GPAC
Gpac
3.3
0%
Sep 13GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference
CVE-2026-79513
GP
Gpac
Gpac
6.5
0%
Sep 9A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS)…
CVE-2026-79514
GP
Gpac
Gpac
6.5
1%
Sep 9An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request
CVE-2026-79522
GP
Gpac
Gpac
6.5
1%
Sep 9An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP…
CVE-2026-15185
GP
GPAC
Gpac
3.3
0%
Jul 9GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds
CVE-2025-15668
GP
GPAC
Gpac
3.3
0%
Jul 6GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow
CVE-2025-15667
GP
GPAC
Gpac
3.3
0%
Jul 6GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free
CVE-2026-14801
GP
GPAC
Gpac
3.3
0%
Jul 6GPAC TeXML File load_text.c txtin_probe_duration divide by zero
CVE-2026-14790
GP
GPAC
Gpac
3.3
0%
Jul 6GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference
CVE-2026-13523
GP
GPAC
Gpac
3.3
0%
Jun 29GPAC ISOBMFF base_encoding.c data amplification
CVE-2025-60464
GP
Gpac
Gpac
7.8
0%
Jun 25A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS)…
CVE-2025-60465
GP
Gpac
Gpac
6.1
0%
Jun 25A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via…
CVE-2025-60473
GP
Gpac
Gpac
5.5
0%
Jun 24A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of…
CVE-2025-60466
GP
Gpac
Gpac
5.0
0%
Jun 24A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via…
CVE-2025-60468
GP
Gpac
Gpac
5.5
0%
Jun 24GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow
CVE-2025-60474
GP
Gpac
Gpac
7.5
1%
Jun 24A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via…
CVE-2025-60471
GP
Gpac
Gpac
5.5
0%
Jun 24A use-after-free in the gf_filter_pid_reconfigure_task_discard function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of…
CVE-2025-60467
GP
Gpac
Gpac
7.5
1%
Jun 24A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of…
CVE-2025-55639
GP
Gpac
Gpac
6.5
1%
Jun 23GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gf_isom_add_track_kind() function at isomedia/isom_write.c
CVE-2025-55648
GP
Gpac
Gpac
5.5
0%
Jun 15A heap buffer overflow in the gf_opus_parse_packet_header function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying…
CVE-2025-55643
GP
Gpac
Gpac
5.5
0%
Jun 15A NULL pointer dereference in the TrackWriter handling component (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a…
CVE-2025-55647
GP
Gpac
Gpac
5.5
0%
Jun 15An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4…
CVE-2025-55644
GP
Gpac
Gpac
5.5
0%
Jun 15A heap use-after-free in the gf_node_get_tag function (scenegraph/base_scenegraph.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a…