| CVE-2023-48011 | ALTO7.8 | GPAC v2.3-DEV-rev566-g50c2ab06f-master was discovered to contain a heap-use-after-free via the flush_ref_samples function at /gpac/src/isomedia/movie_fragments.c. | 15/11/2023 |
| CVE-2023-47384 | MEDIO5.5 | MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file. | 14/11/2023 |
| CVE-2023-46001 | MEDIO5.5 | Buffer Overflow vulnerability in gpac MP4Box v.2.3-DEV-rev573-g201320819-master allows a local attacker to cause a denial of service via the gpac/src/isomedia/isom_read.c:2807:51 function in gf_isom_get_user_data. | 07/11/2023 |
| CVE-2023-5998 | ALTO7.5 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3.0-DEV. | 07/11/2023 |
| CVE-2023-46928 | MEDIO5.5 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42. | 01/11/2023 |
| CVE-2023-46927 | MEDIO5.5 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box. | 01/11/2023 |
| CVE-2023-46931 | MEDIO5.5 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box. | 01/11/2023 |
| CVE-2023-46930 | MEDIO5.5 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14. | 01/11/2023 |
| CVE-2023-5595 | MEDIO5.5 | Denial of Service in GitHub repository gpac/gpac prior to 2.3.0-DEV. | 16/10/2023 |
| CVE-2023-5586 | ALTO7.8 | NULL Pointer Dereference in GitHub repository gpac/gpac prior to 2.3.0-DEV. | 15/10/2023 |
| CVE-2023-42298 | MEDIO5.5 | An issue in GPAC GPAC v.2.2.1 and before allows a local attacker to cause a denial of service via the Q_DecCoordOnUnitSphere function of file src/bifs/unquantize.c. | 12/10/2023 |
| CVE-2023-5520 | ALTO7.7 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.2.2. | 11/10/2023 |
| CVE-2023-5377 | ALTO7.1 | Out-of-bounds Read in GitHub repository gpac/gpac prior to v2.2.2-DEV. | 04/10/2023 |
| CVE-2023-41000 | MEDIO5.5 | GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c. | 11/09/2023 |
| CVE-2023-4778 | MEDIO5.5 | Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV. | 05/09/2023 |
| CVE-2023-4758 | MEDIO5.5 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. | 04/09/2023 |
| CVE-2023-4755 | MEDIO5.5 | Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV. | 04/09/2023 |
| CVE-2023-4756 | MEDIO5.5 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. | 04/09/2023 |
| CVE-2023-4754 | MEDIO5.5 | Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV. | 04/09/2023 |
| CVE-2023-4722 | MEDIO5.5 | Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.3-DEV. | 01/09/2023 |