Approved changes feed: RSS · Atom

cpe:2.3:a:gpac:gpac:2.4.0:*:*:*:*:*:*:*

part: a version: 2.4.0 update: *

VendorGpac (b65d5cc2-7ccf-54fa-ae70-c5b6a48e9c64)
ProductGpac (e0e8511e-4c4c-52a5-ab44-beeeebc0eed7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gpac purl2cpe 2026-06-01 10:16:27.718644
pkg:deb/ubuntu/gpac purl2cpe 2026-06-01 10:16:27.718646
pkg:github/gpac/gpac purl2cpe 2026-06-01 10:16:27.718648
pkg:sourceforge/gpac purl2cpe 2026-06-01 10:16:27.718649

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-70310 vulnerable 2026-06-08 07:43:16.964019 Details available
A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .ogg file.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T16:43:01.292Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70309 vulnerable 2026-06-08 07:43:16.963509 Details available
A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T16:38:15.352Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70308 vulnerable 2026-06-08 07:43:16.953877 Details available
An out-of-bounds read in the GSF demuxer filter component of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .gsf file.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T16:44:15.156Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70307 vulnerable 2026-06-08 07:43:16.953652 Details available
A stack overflow in the dump_ttxt_sample function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T18:44:51.463Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70305 vulnerable 2026-06-08 07:43:16.953424 Details available
A stack overflow in the dmx_saf function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .saf file.
Published: 2026-01-15T00:00:00.000Z
Updated: 2026-01-15T18:40:18.915Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70304 vulnerable 2026-06-08 07:43:16.953012 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70303 vulnerable 2026-06-08 07:43:16.952758 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70302 vulnerable 2026-06-08 07:43:16.952381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70299 vulnerable 2026-06-08 07:43:16.952113 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-70298 vulnerable 2026-06-08 07:43:16.951548 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.