Vendor CVEs

Gpac

All CVEs

478 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-45263	Gpac Gpac	Med	0.36	5.5	0.01	Dec 22, 2021	An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash.
CVE-2021-45262	Gpac Gpac	Med	0.36	5.5	0.01	Dec 22, 2021	An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash.
CVE-2021-45260	Gpac Gpac	Med	0.36	5.5	0.01	Dec 22, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.
CVE-2021-45259	Gpac Gpac	Med	0.36	5.5	0.01	Dec 22, 2021	An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.
CVE-2021-45258	Gpac Gpac	Med	0.36	5.5	0.01	Dec 22, 2021	A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash.
CVE-2021-44927	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash.
CVE-2021-44926	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.
CVE-2021-44925	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash.
CVE-2021-44924	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	An infinite loop vulnerability exists in gpac 1.1.0 in the gf_log function, which causes a Denial of Service.
CVE-2021-44923	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash.
CVE-2021-44922	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash.
CVE-2021-44921	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which causes a segmentation fault and application crash.
CVE-2021-44920	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and application crash.
CVE-2021-44919	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash.
CVE-2021-44918	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash.
CVE-2021-45297	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.
CVE-2021-45292	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
CVE-2021-45291	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
CVE-2021-45289	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service. The program terminates with signal SIGKILL.
CVE-2021-45288	Gpac Gpac	Med	0.36	5.5	0.01	Dec 21, 2021	A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.
CVE-2020-22679	Gpac Gpac	Med	0.36	5.5	0.01	Oct 12, 2021	Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.
CVE-2020-22678	Gpac Gpac	Med	0.36	5.5	0.01	Oct 12, 2021	An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22677	Gpac Gpac	Med	0.36	5.5	0.01	Oct 12, 2021	An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22675	Gpac Gpac	Med	0.36	5.5	0.01	Oct 12, 2021	An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22674	Gpac Gpac	Med	0.36	5.5	0.01	Oct 12, 2021	An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.
CVE-2020-22673	Gpac Gpac	Med	0.36	5.5	0.01	Oct 12, 2021	Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.
CVE-2020-23269	Gpac Gpac	Med	0.36	5.5	0.01	Sep 22, 2021	An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
CVE-2020-23266	Gpac Gpac	Med	0.36	5.5	0.01	Sep 22, 2021	An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
CVE-2021-32270	Gpac Gpac	Med	0.36	5.5	0.01	Sep 20, 2021	An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located in box_code_base.c. It allows an attacker to cause Denial of Service.
CVE-2021-32269	Gpac Gpac	Med	0.36	5.5	0.01	Sep 20, 2021	An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an attacker to cause Denial of Service.
CVE-2021-36584	Gpac Gpac	Med	0.36	5.5	0.01	Aug 5, 2021	An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).
CVE-2020-22352	Gpac Gpac	Med	0.36	5.5	0.01	Aug 4, 2021	The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2020-6631	Gpac Gpac	Med	0.36	5.5	0.01	Jan 9, 2020	An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_process_pmt() in media_tools/m2ts_mux.c.
CVE-2020-6630	Gpac Gpac	Med	0.36	5.5	0.01	Jan 9, 2020	An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_data_size() in isomedia/isom_read.c.
CVE-2019-20171	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
CVE-2019-20170	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.
CVE-2019-20169	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c.
CVE-2019-20168	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_funcs.c.
CVE-2019-20167	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function senc_Parse() in isomedia/box_code_drm.c.
CVE-2019-20166	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_dump() in isomedia/box_dump.c.
CVE-2019-20165	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/box_code_apple.c.
CVE-2019-20164	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia/box_funcs.c.
CVE-2019-20163	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c.
CVE-2019-20162	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c.
CVE-2019-20161	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.
CVE-2019-20160	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in media_tools/av_parsers.c.
CVE-2019-20159	Gpac Gpac	Med	0.36	5.5	0.01	Dec 31, 2019	An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c.
CVE-2019-12481	Gpac Gpac	Med	0.36	5.5	0.01	May 30, 2019	An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box.
CVE-2026-79522	Gpac Gpac	Med	0.35	6.5	0.00	Sep 9, 2026	An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.
CVE-2026-79514	Gpac Gpac	Med	0.35	6.5	0.00	Sep 9, 2026	An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.

CVE-2021-45263MedDec 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An invalid free vulnerability exists in gpac 1.1.0 via the gf_svg_delete_attribute_value function, which causes a segmentation fault and application crash.
CVE-2021-45262MedDec 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An invalid free vulnerability exists in gpac 1.1.0 via the gf_sg_command_del function, which causes a segmentation fault and application crash.
CVE-2021-45260MedDec 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the lsr_read_id.part function, which causes a segmentation fault and application crash.
CVE-2021-45259MedDec 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An Invalid pointer reference vulnerability exists in gpac 1.1.0 via the gf_svg_node_del function, which causes a segmentation fault and application crash.
CVE-2021-45258MedDec 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A stack overflow vulnerability exists in gpac 1.1.0 via the gf_bifs_dec_proto_list function, which causes a segmentation fault and application crash.
CVE-2021-44927MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_sg_vrml_mf_append function, which causes a segmentation fault and application crash.
CVE-2021-44926MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.
CVE-2021-44925MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_svg_get_attribute_name function, which causes a segmentation fault and application crash.
CVE-2021-44924MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An infinite loop vulnerability exists in gpac 1.1.0 in the gf_log function, which causes a Denial of Service.
CVE-2021-44923MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_dump_vrml_dyn_field.isra function, which causes a segmentation fault and application crash.
CVE-2021-44922MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash.
CVE-2021-44921MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A null pointer dereference vulnerability exists in gpac 1.1.0 in the gf_isom_parse_movie_boxes_internal function, which causes a segmentation fault and application crash.
CVE-2021-44920MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An invalid memory address dereference vulnerability exists in gpac 1.1.0 in the dump_od_to_saf.isra function, which causes a segmentation fault and application crash.
CVE-2021-44919MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A Null Pointer Dereference vulnerability exists in the gf_sg_vrml_mf_alloc function in gpac 1.1.0-DEV, which causes a segmentation fault and application crash.
CVE-2021-44918MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A Null Pointer Dereference vulnerability exists in gpac 1.1.0 in the gf_node_get_field function, which can cause a segmentation fault and application crash.
CVE-2021-45297MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An infinite loop vulnerability exists in Gpac 1.0.1 in gf_get_bit_size.
CVE-2021-45292MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
The gf_isom_hint_rtp_read function in GPAC 1.0.1 allows attackers to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
CVE-2021-45291MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
The gf_dump_setup function in GPAC 1.0.1 allows malicoius users to cause a denial of service (Invalid memory address dereference) via a crafted file in the MP4Box command.
CVE-2021-45289MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A vulnerability exists in GPAC 1.0.1 due to an omission of security-relevant Information, which could cause a Denial of Service. The program terminates with signal SIGKILL.
CVE-2021-45288MedDec 21, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
A Double Free vulnerability exists in filedump.c in GPAC 1.0.1, which could cause a Denail of Service via a crafted file in the MP4Box command.
CVE-2020-22679MedOct 12, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
Memory leak in the sgpd_parse_entry function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.
CVE-2020-22678MedOct 12, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The gf_media_nalu_remove_emulation_bytes function in av_parsers.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22677MedOct 12, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The dump_data_hex function in box_dump.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22675MedOct 12, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The GetGhostNum function in stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted input.
CVE-2020-22674MedOct 12, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. An invalid memory dereference exists in the function FixTrackID located in isom_intern.c, which allows attackers to cause a denial of service (DoS) via a crafted input.
CVE-2020-22673MedOct 12, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
Memory leak in the senc_Parse function in MP4Box in gpac 0.8.0 allows attackers to cause a denial of service (DoS) via a crafted input.
CVE-2020-23269MedSep 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The stbl_GetSampleSize function in isomedia/stbl_read.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
CVE-2020-23266MedSep 22, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac 0.8.0. The OD_ReadUTF8String function in odf_code.c has a heap-based buffer overflow which can lead to a denial of service (DOS) via a crafted media file.
CVE-2021-32270MedSep 20, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function vwid_box_del located in box_code_base.c. It allows an attacker to cause Denial of Service.
CVE-2021-32269MedSep 20, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an attacker to cause Denial of Service.
CVE-2021-36584MedAug 5, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).
CVE-2020-22352MedAug 4, 2021
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
The gf_dash_segmenter_probe_input function in GPAC v0.8 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
CVE-2020-6631MedJan 9, 2020
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_m2ts_stream_process_pmt() in media_tools/m2ts_mux.c.
CVE-2020-6630MedJan 9, 2020
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0. There is a NULL pointer dereference in the function gf_isom_get_media_data_size() in isomedia/isom_read.c.
CVE-2019-20171MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.5.2 and 0.9.0-development-20191109. There are memory leaks in metx_New in isomedia/box_code_base.c and abst_Read in isomedia/box_code_adobe.c.
CVE-2019-20170MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is an invalid pointer dereference in the function GF_IPMPX_AUTH_Delete() in odf/ipmpx_code.c.
CVE-2019-20169MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function trak_Read() in isomedia/box_code_base.c.
CVE-2019-20168MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a use-after-free in the function gf_isom_box_dump_ex() in isomedia/box_funcs.c.
CVE-2019-20167MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function senc_Parse() in isomedia/box_code_drm.c.
CVE-2019-20166MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_dump() in isomedia/box_dump.c.
CVE-2019-20165MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function ilst_item_Read() in isomedia/box_code_apple.c.
CVE-2019-20164MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_isom_box_del() in isomedia/box_funcs.c.
CVE-2019-20163MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a NULL pointer dereference in the function gf_odf_avc_cfg_write_bs() in odf/descriptors.c.
CVE-2019-20162MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function gf_isom_box_parse_ex() in isomedia/box_funcs.c.
CVE-2019-20161MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is heap-based buffer overflow in the function ReadGF_IPMPX_WatermarkingInit() in odf/ipmpx_code.c.
CVE-2019-20160MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a stack-based buffer overflow in the function av1_parse_tile_group() in media_tools/av_parsers.c.
CVE-2019-20159MedDec 31, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC version 0.8.0 and 0.9.0-development-20191109. There is a memory leak in dinf_New() in isomedia/box_code_base.c.
CVE-2019-12481MedMay 30, 2019
Gpac
Gpac
risk 0.36cvss 5.5epss 0.01
An issue was discovered in GPAC 0.7.1. There is a NULL pointer dereference in the function GetESD at isomedia/track.c in libgpac.a, as demonstrated by MP4Box.
CVE-2026-79522MedSep 9, 2026
Gpac
Gpac
risk 0.35cvss 6.5epss 0.00
An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.
CVE-2026-79514MedSep 9, 2026
Gpac
Gpac
risk 0.35cvss 6.5epss 0.00
An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.

Page 5 of 10