Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

GPAC — Vulnerabilities & Security Advisories 81

All 81 CVE vulnerabilities found in GPAC, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the GPAC media framework. It collects recorded software flaws, covering a specific range of historical advisories for the open-source GPAC product. Readers can track the vendor’s advisory timeline, understand the prevalence of specific weakness classes such as memory corruption or input validation errors, and review the product’s complete vulnerability history.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-103227 GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow CWE-120 6.3 Medium 2026-09-30
CVE-2026-93331 GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds CWE-125 7.3 High 2026-09-18
CVE-2026-92475 GPAC downloader.c wait_for_header_and_parse out-of-bounds CWE-125 5.3 Medium 2026-09-16
CVE-2026-92474 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free CWE-416 3.3 Low 2026-09-16
CVE-2026-92473 GPAC BIFS commands.c gf_sg_command_del use after free CWE-416 3.3 Low 2026-09-16
CVE-2026-92472 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free CWE-416 3.3 Low 2026-09-16
CVE-2026-92399 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow CWE-122 7.3 High 2026-09-16
CVE-2026-91091 GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption CWE-119 4.3 Medium 2026-09-15
CVE-2026-91090 GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow CWE-121 3.9 Low 2026-09-15
CVE-2026-91089 GPAC base_scenegraph.c gf_node_get_name_and_id use after free CWE-416 6.3 Medium 2026-09-15
CVE-2026-91088 GPAC URL url.c gf_url_concatenate_ex heap-based overflow CWE-122 4.8 Medium 2026-09-15
CVE-2026-91087 GPAC Compositor media_object.c gf_mo_get_od_id use after free CWE-416 7.3 High 2026-09-15
CVE-2026-91086 GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow CWE-122 6.3 Medium 2026-09-15
CVE-2026-90827 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free CWE-416 3.3 Low 2026-09-14
CVE-2026-90826 GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds CWE-125 2.8 Low 2026-09-14
CVE-2026-90825 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free CWE-416 3.3 Low 2026-09-14
CVE-2026-90824 GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow CWE-121 3.3 Low 2026-09-14
CVE-2026-90794 GPAC MP4Box vrml_tools.c gf_sg_script_load use after free CWE-416 6.3 Medium 2026-09-14
CVE-2026-90793 GPAC MP4Box base_scenegraph.c gf_node_get_name use after free CWE-416 5.4 Medium 2026-09-14
CVE-2026-90792 GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference CWE-476 4.3 Medium 2026-09-14
CVE-2026-90791 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free CWE-416 6.3 Medium 2026-09-14
CVE-2026-90687 GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free CWE-416 6.3 Medium 2026-09-14
CVE-2026-90686 GPAC MP4Box loader_bt.c gf_bt_report memory corruption CWE-119 5.3 Medium 2026-09-14
CVE-2026-90685 GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion CWE-617 2.8 Low 2026-09-14
CVE-2026-90684 GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion CWE-617 2.8 Low 2026-09-14
CVE-2026-90683 GPAC MP4Box base_scenegraph.c gf_node_unregister assertion CWE-617 3.3 Low 2026-09-14
CVE-2026-90613 GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion CWE-617 3.3 Low 2026-09-14
CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion CWE-617 3.3 Low 2026-09-14
CVE-2026-90611 GPAC MP4Box loader_xmt.c xmt_parse_element assertion CWE-617 3.3 Low 2026-09-14
CVE-2026-90610 GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read CWE-126 3.3 Low 2026-09-14

All 81 known CVE vulnerabilities affecting GPAC with full Chinese analysis, references, and POCs where available.