Where
-Infinity
0

Trending

Last week
Last month
Last year

Vendor Risk Score

See how gpac compares to other vendors in security performance

View Risk Score →

Gpac MP4BoxGPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds

Risk 18
Severity
1.9
First published (updated )
CVE-2026-15185

Gpac MP4BoxGPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow

Risk 18
Severity
1.9
First published (updated )
CVE-2025-15668

Gpac MP4BoxGPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free

Risk 18
Severity
1.9
First published (updated )
CVE-2025-15667

Gpac GPACGPAC TeXML File load_text.c txtin_probe_duration divide by zero

Risk 23
Severity
4.8
First published (updated )
CVE-2026-14801

Gpac Media File HandlerGPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference

Risk 18
Severity
1.9
First published (updated )
CVE-2026-14790
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Gpac GPACGPAC ISOBMFF base_encoding.c data amplification

Risk 18
Severity
1.9
First published (updated )
CVE-2026-13523

oss-secCVE-2025-60474: Heap-based Buffer Overflow in GPAC/MP4Box via gf_media_import on crafted MPEG-2 TS file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1044

oss-secCVE-2025-60473: NULL Pointer Defence in GPAC/MP4Box via gf_filter_in_pant_chain on crafted MPEG-2 TS file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1042

oss-secCVE-2025-60466: Expid Pointer Defence in GPAC/MP4Box via gf_filter_pid_get_packet on crafted MPEG-2 TS file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1041

oss-secCVE-2025-60465: Use-After-Fe in GPAC/MP4Box via gf_filter_pid_inst_swap on crafted MPEG-2 TS file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1040
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secCVE-2025-60464: NULL Pointer Defence in GPAC/MP4Box via gf_sei_load_from_state_internal on crafted MPEG-2 TS file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1035

oss-secCVE-2025-60471: Use-After-Fe in GPAC/MP4Box via gf_filter_pid_configu_task_discard on crafted MPEG-2 TS file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1034

oss-secCVE-2025-55639: NULL Pointer Defence in GPAC/MP4Box via gf_isom_add_track_kind on crafted MP4 file

First published (updated )
https://seclists.org/oss-sec/2026/q2/1033

GPAC/MP4BoxNULL Pointer Defence in GPAC/MP4Box via gf_sei_load_from_state_internal on crafted MPEG-2 TS file

Risk 72
Severity
7.8
First published (updated )
CVE-2025-60464

Gpac MP4BoxUse-After-Fe in GPAC/MP4Box via gf_filter_pid_inst_swap on crafted MPEG-2 TS file

Risk 43
Severity
6.1
First published (updated )
CVE-2025-60465
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Gpac MP4BoxUse-After-Fe in GPAC/MP4Box via gf_filter_pid_configu_task_discard on crafted MPEG-2 TS file

Risk 33
Severity
5.5
First published (updated )
CVE-2025-60471

Gpac MP4BoxBuffer Overflow, Use After Free

Risk 32
Severity
5.5
First published (updated )
CVE-2025-60468

Gpac MP4BoxUse-After-Fe in GPAC/MP4Box via gf_filter_pid_inst_swap_delete_task on crafted MPEG-2 TS file

Risk 46
Severity
7.5
First published (updated )
CVE-2025-60467

Gpac Project MP4BoxHeap-based Buffer Overflow in GPAC/MP4Box via gf_media_import on crafted MPEG-2 TS file

Risk 46
Severity
7.5
First published (updated )
CVE-2025-60474

Gpac Project MP4BoxExpid Pointer Defence in GPAC/MP4Box via gf_filter_pid_get_packet on crafted MPEG-2 TS file

Risk 30
Severity
5
First published (updated )
CVE-2025-60466
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Gpac MP4BoxNULL Pointer Defence in GPAC/MP4Box via gf_filter_in_pant_chain on crafted MPEG-2 TS file

Risk 33
Severity
5.5
First published (updated )
CVE-2025-60473

Gpac MP4BoxNULL Pointer Defence in GPAC/MP4Box via gf_isom_add_track_kind on crafted MP4 file

Risk 39
Severity
6.5
First published (updated )
CVE-2025-55639

Gpac MP4BoxBuffer Overflow

Risk 31
Severity
5.5
First published (updated )
CVE-2025-55645

Gpac MP4BoxNull Pointer Dereference

Risk 31
Severity
5.5
First published (updated )
CVE-2025-55643

oss-secProposal: Add separate oss-security-vulnerability-ports mailing list (for AI vulnpocalypse)

First published (updated )
https://seclists.org/oss-sec/2026/q2/922
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

oss-secDivide by Zero in GPAC/MP4Box via gf_opus_parse_packet_header on crafted MP4 file with malformed Opus header

First published (updated )
CVE-2025-55662

Gpac MP4BoxStack-based Buffer Overflow in GPAC/MP4Box via gf_opus_ad_length on crafted MP4 file with malformed Opus packet

Risk 33
Severity
5.5
First published (updated )
CVE-2025-55660

Gpac MP4BoxNULL Pointer Defence in GPAC/MP4Box via Track_SetStamDescriptor on crafted MP4 with unknown svcC box in av01

Risk 33
Severity
5.5
First published (updated )
CVE-2025-55663

Gpac MP4BoxHeap-based Buffer Overflow in GPAC/MP4Box via gf_opus_parse_packet_header on crafted MP4 file with malformed Opus packet

Risk 33
Severity
5.5
First published (updated )
CVE-2025-55661

Gpac MP4BoxUse-After-Fe in GPAC/MP4Box via gf_svg_node_del on crafted MP4 file processed with -svg

Risk 33
Severity
5.5
First published (updated )
CVE-2025-55650
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203