G
GPAC
Security Risk Profile
31
/100
lowSecurity Risk Score
Comprehensive risk assessment based on 511 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from March 7, 2018 to present
511
Total CVEs
166
Critical+High
1
Exploited
43
Unpatched
Threat Assessment
Avg CVSS
6.1
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
43
Critical/High
Risk Level
31/100
low
⚠️ 1 Active Exploits🆕 11Fresh (<7d)📈 16 in Last 30 Days
Severity Distribution
Critical
13High
153Medium
259Low
43Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
56Age Distribution
Common Weaknesses (CWE)
1
Buffer Overflow
158
2
Null Pointer Dereference
117
3
Use After Free
51
4
Integer Overflow
38
5
Double Free
10
Most Affected Products
1. Gpac GPAC477
2. debian/gpac139
3. Gpac MP4Box109
4. Debian Debian Linux64
5. Canonical Ubuntu Linux12
Recent Vulnerabilities
See more →CVE-2025-60489
unknown
Oct 21, 2026🔧 No Patch
CVE-2025-60487
unknown
Oct 21, 2026🔧 No Patch
CVE-2025-60490
unknown
Oct 21, 2026🔧 No Patch
CVE-2025-60492
unknown
Oct 21, 2026🔧 No Patch
CVE-2025-60476
unknown
Oct 21, 2026🔧 No Patch
CVE-2025-55654
unknown
Oct 19, 2026🔧 No Patch
CVE-2025-55667
CVSS 5.5medium
Oct 19, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/218
unknown
CVE-2025-55653: Divide by Zero in GPAC/MP4Box via gf_parse_lfrac on crafted MP4 with zero-denominator fraction
Oct 17, 2026🔧 No Patch
https://seclists.org/oss-sec/2026/q4/216
unknown
CVE-2025-55640: Heap Buffer Overflow in GPAC/MP4Box via stbl_AddSize on crafted MP4 with corrupted sample metadata
Oct 17, 2026🔧 No Patch
CVE-2025-55653
unknown
Divide by Zero in GPAC/MP4Box via gf_parse_lfrac on crafted MP4 with zero-denominator fraction
Oct 16, 2026🔧 No Patch
Monitor GPAC in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.