GCVE - cpe:2.3:a:gpac:gpac:2.3:dev:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gpac:gpac:2.3:dev:*:*:*:*:*:*

part: a version: 2.3 update: dev

Vendor	Gpac (`b65d5cc2-7ccf-54fa-ae70-c5b6a48e9c64`)
Product	Gpac (`e0e8511e-4c4c-52a5-ab44-beeeebc0eed7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gpac`	purl2cpe	2026-06-01 10:16:27.706643
`pkg:deb/ubuntu/gpac`	purl2cpe	2026-06-01 10:16:27.706644
`pkg:github/gpac/gpac`	purl2cpe	2026-06-01 10:16:27.706645
`pkg:sourceforge/gpac`	purl2cpe	2026-06-01 10:16:27.706646

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-50120`	vulnerable	2026-06-08 06:16:15.572408	Details available MP4Box GPAC version 2.3-DEV-rev636-gfbd7e13aa-master was discovered to contain an infinite loop in the function av1_uvlc at media_tools/av_parsers.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file. Published: 2024-01-10T00:00:00.000Z Updated: 2025-06-17T15:58:50.895Z Open on db.gcve.eu Reference links https://github.com/gpac/gpac/issues/2698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1452`	vulnerable	2026-06-08 05:52:35.937067	GPAC load_text.c buffer overflow MEDIUM (5.3) A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file filters/load_text.c. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223297 was assigned to this vulnerability. Published: 2023-03-17T06:50:37.037Z Updated: 2024-08-02T05:49:11.534Z Open on db.gcve.eu Reference links https://vuldb.com/?id.223297 https://vuldb.com/?ctiid.223297 https://github.com/gpac/gpac/issues/2386 https://github.com/xxy1126/Vuln/blob/main/gpac/1.mp4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1449`	vulnerable	2026-06-08 05:52:35.933787	GPAC av_parsers.c gf_av1_reset_state double free MEDIUM (5.3) A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_state of the file media_tools/av_parsers.c. The manipulation leads to double free. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-223294 is the identifier assigned to this vulnerability. Published: 2023-03-17T06:44:38.892Z Updated: 2024-08-02T05:49:11.572Z Open on db.gcve.eu Reference links https://vuldb.com/?id.223294 https://vuldb.com/?ctiid.223294 https://github.com/gpac/gpac/issues/2387 https://github.com/xxy1126/Vuln/blob/main/gpac/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-1448`	vulnerable	2026-06-08 05:52:35.933202	GPAC mpegts.c gf_m2ts_process_sdt heap-based overflow MEDIUM (5.3) A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the file media_tools/mpegts.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The identifier VDB-223293 was assigned to this vulnerability. Published: 2023-03-17T06:43:19.758Z Updated: 2025-02-26T14:51:03.068Z Open on db.gcve.eu Reference links https://vuldb.com/?id.223293 https://vuldb.com/?ctiid.223293 https://github.com/gpac/gpac/issues/2388 https://github.com/xxy1126/Vuln/blob/main/gpac/3	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.