Gpac
Gpac · 405 CVEs
GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow
Sep 30, 2026
GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds
Sep 18, 2026
GPAC downloader.c wait_for_header_and_parse out-of-bounds
Sep 16, 2026
GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free
Sep 16, 2026
GPAC BIFS commands.c gf_sg_command_del use after free
Sep 16, 2026
GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
Sep 16, 2026
GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow
Sep 16, 2026
GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption
Sep 15, 2026
GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow
Sep 15, 2026
GPAC base_scenegraph.c gf_node_get_name_and_id use after free
Sep 15, 2026
GPAC URL url.c gf_url_concatenate_ex heap-based overflow
Sep 15, 2026
GPAC Compositor media_object.c gf_mo_get_od_id use after free
Sep 15, 2026
GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow
Sep 15, 2026
GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_unregister use after free
Sep 14, 2026
GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow
Sep 14, 2026
GPAC MP4Box vrml_tools.c gf_sg_script_load use after free
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_get_name use after free
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_unregister use after free
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free
Sep 14, 2026
GPAC MP4Box loader_bt.c gf_bt_report memory corruption
Sep 14, 2026
GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion
Sep 14, 2026
GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion
Sep 14, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-103227 | GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow | MEDIUM | 0.52% | Sep 30, 2026 |
| CVE-2026-93331 | GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds | MEDIUM | 0.54% | Sep 18, 2026 |
| CVE-2026-92475 | GPAC downloader.c wait_for_header_and_parse out-of-bounds | MEDIUM | 0.16% | Sep 16, 2026 |
| CVE-2026-92474 | GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free | MEDIUM | 0.17% | Sep 16, 2026 |
| CVE-2026-92473 | GPAC BIFS commands.c gf_sg_command_del use after free | MEDIUM | 0.17% | Sep 16, 2026 |
| CVE-2026-92472 | GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free | MEDIUM | 0.17% | Sep 16, 2026 |
| CVE-2026-92399 | GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow | MEDIUM | 0.69% | Sep 16, 2026 |
| CVE-2026-91091 | GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption | MEDIUM | 0.69% | Sep 15, 2026 |
| CVE-2026-91090 | GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow | LOW | 0.17% | Sep 15, 2026 |
| CVE-2026-91089 | GPAC base_scenegraph.c gf_node_get_name_and_id use after free | MEDIUM | 0.51% | Sep 15, 2026 |
| CVE-2026-91088 | GPAC URL url.c gf_url_concatenate_ex heap-based overflow | LOW | 0.16% | Sep 15, 2026 |
| CVE-2026-91087 | GPAC Compositor media_object.c gf_mo_get_od_id use after free | MEDIUM | 0.64% | Sep 15, 2026 |
| CVE-2026-91086 | GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow | MEDIUM | 0.55% | Sep 15, 2026 |
| CVE-2026-90827 | GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free | MEDIUM | 0.17% | Sep 14, 2026 |
| CVE-2026-90826 | GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds | LOW | 0.16% | Sep 14, 2026 |
| CVE-2026-90825 | GPAC MP4Box base_scenegraph.c gf_node_unregister use after free | MEDIUM | 0.17% | Sep 14, 2026 |
| CVE-2026-90824 | GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow | MEDIUM | 0.18% | Sep 14, 2026 |
| CVE-2026-90794 | GPAC MP4Box vrml_tools.c gf_sg_script_load use after free | MEDIUM | 0.51% | Sep 14, 2026 |
| CVE-2026-90793 | GPAC MP4Box base_scenegraph.c gf_node_get_name use after free | MEDIUM | 0.58% | Sep 14, 2026 |
| CVE-2026-90792 | GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference | MEDIUM | 0.69% | Sep 14, 2026 |
| CVE-2026-90791 | GPAC MP4Box base_scenegraph.c gf_node_unregister use after free | MEDIUM | 0.51% | Sep 14, 2026 |
| CVE-2026-90687 | GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free | MEDIUM | 0.51% | Sep 14, 2026 |
| CVE-2026-90686 | GPAC MP4Box loader_bt.c gf_bt_report memory corruption | MEDIUM | 0.86% | Sep 14, 2026 |
| CVE-2026-90685 | GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion | LOW | 0.16% | Sep 14, 2026 |
| CVE-2026-90684 | GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion | LOW | 0.16% | Sep 14, 2026 |
Showing 1 to 25 of 405 CVEs