Products: 2
    Vulnerabilities: 488
    Known Exploited: 0
    13
    Critical Level Threats
    147
    High Level Threats
    294
    Medium Level Threats
    34
    Low Level Threats

    Vulnerabilities

    100806040200
    JanFebMarAprMayJunJulAugSepOctNovDec
    Critical Level Threats
    High Level Threats
    Medium Level Threats
    Low Level Threats

    Products Security index

    Actions
    Items Per Page

    Vulnerabilities

    CVE-2025-60490

    Heap Use-After-Free in GPAC MP4Box Leading to Denial of Service

    Last Modified: Oct 26, 2026
    Published: Oct 21, 2026

    CVE-2025-60476

    A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

    Last Modified: Oct 26, 2026
    Published: Oct 21, 2026

    CVE-2025-60491

    A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

    Last Modified: Oct 27, 2026
    Published: Oct 21, 2026

    CVE-2025-60489

    NULL Pointer Dereference in GPAC MP4Box May Cause DoS

    Last Modified: Oct 26, 2026
    Published: Oct 21, 2026

    CVE-2025-71438

    An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

    Last Modified: Oct 26, 2026
    Published: Oct 21, 2026
    Items Per Page
    Gpac Vulnerabilities & Security CVEs | CVE-DB