Approved changes feed: RSS · Atom

cpe:2.3:a:gpac:gpac:0.5.2:*:*:*:*:*:*:*

part: a version: 0.5.2 update: *

VendorGpac (b65d5cc2-7ccf-54fa-ae70-c5b6a48e9c64)
ProductGpac (e0e8511e-4c4c-52a5-ab44-beeeebc0eed7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/gpac purl2cpe 2026-06-01 10:16:27.684010
pkg:deb/ubuntu/gpac purl2cpe 2026-06-01 10:16:27.684012
pkg:github/gpac/gpac purl2cpe 2026-06-01 10:16:27.684013
pkg:sourceforge/gpac purl2cpe 2026-06-01 10:16:27.684014

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28300 vulnerable 2026-06-08 05:31:23.774816 Details available
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.
Published: 2021-04-14T13:51:42.000Z
Updated: 2024-08-03T21:40:13.313Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.