CVE Feed

    Dashboard / CVE / CVE-2024-24267

    CVE-2024-24267

    gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.

    Published:Feb 5, 2024
    Last Modified:Sep 26, 2025
    EPS:Feb 5, 2024
    EPSS Score:0.00244
    CVSS Score:7.5

    Affected Products

    Vendor
    Gpac
    Product
    Gpac

    Exploits

    https://github.com/yinluming13579/gpac_defects/blob/main/gpac_3.mdhttps://github.com/yinluming13579/gpac_defects/blob/main/gpac_3.md

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-71612 — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79522 (CVSS 6.5) — An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows at…
    CVE-2026-71614 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the…
    CVE-2026-71616 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via …
    CVE-2026-71613 (CVSS 7.8) — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79513 (CVSS 6.5) — A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) o…
    CVE-2026-79514 (CVSS 6.5) — An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to …
    CVE-2026-52489 (CVSS 7.8) — Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute a…
    CVE-2026-15185 (CVSS 1.9) — A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/m…
    CVE-2026-50810 (CVSS 5.5) — A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High