GPAC — Vulnerabilities & Security Advisories 81

All 81 CVE vulnerabilities found in GPAC, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the GPAC media framework. It collects recorded software flaws, covering a specific range of historical advisories for the open-source GPAC product. Readers can track the vendor’s advisory timeline, understand the prevalence of specific weakness classes such as memory corruption or input validation errors, and review the product’s complete vulnerability history.

Vendor: n/a

CVE ID	Title	CVSS	Severity	Published
CVE-2026-90609	GPAC MP4Box vrml_tools.c null pointer dereference CWE-476	3.3	Low	2026-09-14
CVE-2026-90578	GPAC MP4Box list.c gf_list_count use after free CWE-416	5.3	Medium	2026-09-13
CVE-2026-90577	GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow CWE-122	5.3	Medium	2026-09-13
CVE-2026-90576	GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference CWE-476	3.3	Low	2026-09-13
CVE-2026-90573	GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference CWE-476	3.3	Low	2026-09-13
CVE-2026-15185	GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds CWE-125	3.3	Low	2026-07-09
CVE-2025-15668	GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow CWE-122	3.3	Low	2026-07-06
CVE-2025-15667	GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free CWE-415	3.3	Low	2026-07-06
CVE-2026-14801	GPAC TeXML File load_text.c txtin_probe_duration divide by zero CWE-369	3.3	Low	2026-07-06
CVE-2026-14790	GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference CWE-476	3.3	Low	2026-07-06
CVE-2026-13523	GPAC ISOBMFF base_encoding.c data amplification CWE-409	3.3	Low	2026-06-29
CVE-2026-9572	GPAC MP4Box media.c Media_GetSample memory leak CWE-401	3.3	Low	2026-05-26
CVE-2026-9567	GPAC MP4Box isom_intern.c MergeFragment null pointer dereference CWE-476	3.3	Low	2026-05-26
CVE-2026-8124	GPAC box_code_base.c sidx_box_read allocation of resources CWE-770	3.3	Low	2026-05-08
CVE-2026-7135	GPAC MP4Box box_code_base.c elng_box_read out-of-bounds CWE-125	5.3	Medium	2026-04-27
CVE-2026-33144	GPAC MP4Box Heap Buffer Overflow Write in gf_xml_parse_bit_sequence_bs (NHML BS Parsing) CWE-787	5.8	Medium	2026-03-20
CVE-2026-4185	GPAC MP4Box swf_parse.c swf_def_bits_jpeg stack-based overflow CWE-121	6.3	Medium	2026-03-15
CVE-2026-4016	GPAC SVG Parser load_svg.c svgin_process out-of-bounds write CWE-787	5.3	Medium	2026-03-12
CVE-2026-4015	GPAC TeXML File load_text.c txtin_process_texml stack-based overflow CWE-121	5.3	Medium	2026-03-12
CVE-2026-27821	GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow CWE-121	8.1^AI	High ^AI	2026-02-26
CVE-2026-1418	GPAC SRT Subtitle Import text_to_bifs.c gf_text_import_srt_bifs out-of-bounds write CWE-787	5.3	Medium	2026-01-26
CVE-2026-1417	GPAC filedump.c dump_isom_rtp null pointer dereference CWE-476	3.3	Low	2026-01-26
CVE-2026-1416	GPAC filedump.c DumpMovieInfo null pointer dereference CWE-476	3.3	Low	2026-01-26
CVE-2026-1415	GPAC media_export.c gf_media_export_webvtt_metadata null pointer dereference CWE-476	3.3	Low	2026-01-26
CVE-2025-7797	GPAC dash_client.c gf_dash_download_init_segment null pointer dereference CWE-476	5.3	Medium	2025-07-18
CVE-2024-6064	GPAC MP4Box loader_xmt.c xmt_node_end use after free CWE-416	5.3	Medium	2024-06-17
CVE-2024-6063	GPAC MP4Box dmx_m2ts.c m2tsdmx_on_event null pointer dereference CWE-476	3.3	Low	2024-06-17
CVE-2024-6062	GPAC MP4Box load_text.c swf_svg_add_iso_sample null pointer dereference CWE-476	3.3	Low	2024-06-17
CVE-2024-6061	GPAC MP4Box isoffin_read.c isoffin_process infinite loop CWE-835	3.3	Low	2024-06-17
CVE-2023-1452	GPAC load_text.c buffer overflow CWE-120	5.3	Medium	2023-03-17

All 81 known CVE vulnerabilities affecting GPAC with full Chinese analysis, references, and POCs where available.