gpac records

405 published records for vendor gpac.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 4
With a fix record: 49.9%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

405 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2018-13005No exploit	An issue was discovered in MP4Box in GPAC 0.7.1.gpac · gpac · CWE-125 Pre-auth Memory safety	Critical9.8	—	2.5%	Jun 29, 2018
40Plan	CVE-2018-13006No exploit	An issue was discovered in MP4Box in GPAC 0.7.1.gpac · gpac · CWE-125 Pre-auth Memory safety	Critical9.8	—	2.3%	Jun 29, 2018
40Plan	CVE-2021-28300No exploit	NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary codgpac · gpac · CWE-476 pre-auth RCE Memory safety	Critical9.8	—	2.1%	Apr 14, 2021
39Monitor	CVE-2020-11558No exploit	An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box.gpac · gpac · CWE-416 Pre-auth Memory safety	Critical9.8	—	1.5%	Apr 5, 2020
39Monitor	CVE-2023-46932No exploit	Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a gpac · gpac · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	1.1%	Dec 9, 2023
39Monitor	CVE-2023-46427No exploit	An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial gpac · gpac · CWE-476 pre-auth RCE Memory safety	Critical9.8	—	1.1%	Mar 9, 2024
39Monitor	CVE-2022-36190No exploit	GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get.gpac · gpac · CWE-416 Pre-auth Memory safety	Critical9.8	—	1.1%	Aug 17, 2022
39Monitor	CVE-2024-0321No exploit	Stack-based Buffer Overflow in gpac/gpacgpac · gpac · CWE-121 Pre-auth Memory safety	Critical9.8	—	1.0%	Jan 8, 2024
39Monitor	CVE-2022-1795No exploit	Use After Free in gpac/gpacgpac · gpac · CWE-416 Pre-auth Memory safety	Critical9.8	—	1.0%	May 18, 2022
39Monitor	CVE-2023-2840No exploit	NULL Pointer Dereference in gpac/gpacgpac · gpac · CWE-476 Pre-auth Memory safety	Critical9.8	—	0.7%	May 22, 2023
36Monitor	CVE-2021-21843No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21837No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21839No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21846No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21838No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21845No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21852No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21847No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21844No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	2.0%	Aug 18, 2021
36Monitor	CVE-2021-21841No exploit	An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librargpac · gpac · CWE-680 Pre-auth	High8.8	—	1.7%	Aug 25, 2021
36Monitor	CVE-2021-21851No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	1.7%	Aug 18, 2021
36Monitor	CVE-2021-21848No exploit	An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librargpac · gpac · CWE-680 Pre-auth	High8.8	—	1.7%	Aug 25, 2021
36Monitor	CVE-2021-21834No exploit	An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librargpac · gpac · CWE-680 Pre-auth	High8.8	—	1.7%	Aug 25, 2021
36Monitor	CVE-2021-21853No exploit	Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Contentgpac · gpac · CWE-680 Pre-auth	High8.8	—	1.7%	Aug 18, 2021
36Monitor	CVE-2021-21836No exploit	An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librargpac · gpac · CWE-680 Pre-auth	High8.8	—	1.7%	Aug 25, 2021

CVE-2018-13005
40Plan
An issue was discovered in MP4Box in GPAC 0.7.1.
CriticalCVSS 9.8No exploitEPSS 3%
- Pre-auth
- Memory safety
gpac · gpacJun 29, 2018
CVE-2018-13006
40Plan
An issue was discovered in MP4Box in GPAC 0.7.1.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
gpac · gpacJun 29, 2018
CVE-2021-28300
40Plan
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary cod
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Memory safety
gpac · gpacApr 14, 2021
CVE-2020-11558
39Monitor
An issue was discovered in libgpac.a in GPAC 0.8.0, as demonstrated by MP4Box.
CriticalCVSS 9.8No exploitEPSS 2%
- Pre-auth
- Memory safety
gpac · gpacApr 5, 2020
CVE-2023-46932
39Monitor
Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master, allows attackers to execute arbitrary code and cause a
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
gpac · gpacDec 9, 2023
CVE-2023-46427
39Monitor
An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote attackers to execute arbitrary code, cause a denial
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
gpac · gpacMar 9, 2024
CVE-2022-36190
39Monitor
GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get.
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
gpac · gpacAug 17, 2022
CVE-2024-0321
39Monitor
Stack-based Buffer Overflow in gpac/gpac
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
gpac · gpacJan 8, 2024
CVE-2022-1795
39Monitor
Use After Free in gpac/gpac
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
gpac · gpacMay 18, 2022
CVE-2023-2840
39Monitor
NULL Pointer Dereference in gpac/gpac
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
gpac · gpacMay 22, 2023
CVE-2021-21843
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21837
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21839
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21846
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21838
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21845
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21852
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21847
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21844
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21841
36Monitor
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librar
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 25, 2021
CVE-2021-21851
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21848
36Monitor
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librar
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 25, 2021
CVE-2021-21834
36Monitor
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librar
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 25, 2021
CVE-2021-21853
36Monitor
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 18, 2021
CVE-2021-21836
36Monitor
An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content librar
HighCVSS 8.8No exploitEPSS 2%
- Pre-auth
gpac · gpacAug 25, 2021