GCVE - cpe:2.3:a:gpac:gpac:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:gpac:gpac:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Gpac (`b65d5cc2-7ccf-54fa-ae70-c5b6a48e9c64`)
Product	Gpac (`e0e8511e-4c4c-52a5-ab44-beeeebc0eed7`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:deb/debian/gpac`	purl2cpe	2026-06-01 10:16:27.684005
`pkg:deb/ubuntu/gpac`	purl2cpe	2026-06-01 10:16:27.684006
`pkg:github/gpac/gpac`	purl2cpe	2026-06-01 10:16:27.684008
`pkg:sourceforge/gpac`	purl2cpe	2026-06-01 10:16:27.684009

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-4679`	vulnerable	2026-06-08 06:16:14.135333	Use After Free in gpac/gpac MEDIUM (5.9) A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38. This vulnerability can lead to a double-free condition, which may cause the application to crash. Published: 2024-11-15T10:53:32.070Z Updated: 2024-11-15T19:12:15.195Z Open on db.gcve.eu Reference links https://huntr.com/bounties/6f721ee7-8785-4c26-801e-f40fed3faaac https://github.com/gpac/gpac/commit/b68b3f0bf5c366e003221d78fd663a1d5514a876	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-37767`	vulnerable	2026-06-08 06:08:15.957403	Details available GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so. Published: 2023-07-11T00:00:00.000Z Updated: 2024-11-14T18:57:47.537Z Open on db.gcve.eu Reference links https://github.com/gpac/gpac/issues/2514	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.