# cve.now: Gpac

The newest entries naming Gpac as an affected vendor (up to 200), of 51 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-124031](https://cve.now/CVE-2026-124031.md): GPAC through 26.07.0 Type Confusion via drawable\_get\_aspect\_2d\_mpeg4 (CVSS 6.8)
- [CVE-2026-124030](https://cve.now/CVE-2026-124030.md): GPAC through 26.07.0 Type Confusion via gf\_sg\_command\_apply XMT Field-Replace (CVSS 6.8)
- [CVE-2026-33144](https://cve.now/CVE-2026-33144.md): GPAC MP4Box Heap Buffer Overflow Write in gf\_xml\_parse\_bit\_sequence\_bs (NHML BS Parsing) (CVSS 5.8)
- [CVE-2026-27821](https://cve.now/CVE-2026-27821.md): GPAC NHML Demuxer (dmx\_nhml.c) Vulnerable to Stack Buffer Overflow (CVSS 7.7)
- [CVE-2023-4679](https://cve.now/CVE-2023-4679.md): Use After Free in gpac/gpac (CVSS 5.9)
- [CVE-2024-0322](https://cve.now/CVE-2024-0322.md): Out-of-bounds Read in gpac/gpac (CVSS 4.4)
- [CVE-2024-0321](https://cve.now/CVE-2024-0321.md): Stack-based Buffer Overflow in gpac/gpac (CVSS 4.0)
- [CVE-2023-5998](https://cve.now/CVE-2023-5998.md): Out-of-bounds Read in gpac/gpac (CVSS 4.0)
- [CVE-2023-5595](https://cve.now/CVE-2023-5595.md): Denial of Service in gpac/gpac (CVSS 5.1)
- [CVE-2023-5586](https://cve.now/CVE-2023-5586.md): NULL Pointer Dereference in gpac/gpac (CVSS 4.4)
- [CVE-2023-5520](https://cve.now/CVE-2023-5520.md): Out-of-bounds Read in gpac/gpac (CVSS 4.0)
- [CVE-2023-5377](https://cve.now/CVE-2023-5377.md): Out-of-bounds Read in gpac/gpac (CVSS 5.5)
- [CVE-2023-4778](https://cve.now/CVE-2023-4778.md): Out-of-bounds Read in gpac/gpac (CVSS 5.9)
- [CVE-2023-4758](https://cve.now/CVE-2023-4758.md): Buffer Over-read in gpac/gpac (CVSS 5.9)
- [CVE-2023-4755](https://cve.now/CVE-2023-4755.md): Use After Free in gpac/gpac (CVSS 5.3)
- [CVE-2023-4756](https://cve.now/CVE-2023-4756.md): Stack-based Buffer Overflow in gpac/gpac (CVSS 5.9)
- [CVE-2023-4754](https://cve.now/CVE-2023-4754.md): Out-of-bounds Write in gpac/gpac (CVSS 5.3)
- [CVE-2023-4722](https://cve.now/CVE-2023-4722.md): Integer Overflow or Wraparound in gpac/gpac (CVSS 5.9)
- [CVE-2023-4721](https://cve.now/CVE-2023-4721.md): Out-of-bounds Read in gpac/gpac (CVSS 5.9)
- [CVE-2023-4720](https://cve.now/CVE-2023-4720.md): Floating Point Comparison with Incorrect Operator in gpac/gpac (CVSS 4.0)
- [CVE-2023-4683](https://cve.now/CVE-2023-4683.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.3)
- [CVE-2023-4682](https://cve.now/CVE-2023-4682.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 5.9)
- [CVE-2023-4681](https://cve.now/CVE-2023-4681.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.1)
- [CVE-2023-4678](https://cve.now/CVE-2023-4678.md): Divide By Zero in gpac/gpac (CVSS 5.1)
- [CVE-2023-3523](https://cve.now/CVE-2023-3523.md): Out-of-bounds Read in gpac/gpac (CVSS 6.1)
- [CVE-2023-3291](https://cve.now/CVE-2023-3291.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 5.1)
- [CVE-2023-3013](https://cve.now/CVE-2023-3013.md): Unchecked Return Value in gpac/gpac (CVSS 4.4)
- [CVE-2023-3012](https://cve.now/CVE-2023-3012.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.3)
- [CVE-2023-2840](https://cve.now/CVE-2023-2840.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.3)
- [CVE-2023-2839](https://cve.now/CVE-2023-2839.md): Divide By Zero in gpac/gpac (CVSS 6.8)
- [CVE-2023-2838](https://cve.now/CVE-2023-2838.md): Out-of-bounds Read in gpac/gpac (CVSS 6.1)
- [CVE-2023-2837](https://cve.now/CVE-2023-2837.md): Stack-based Buffer Overflow in gpac/gpac (CVSS 5.5)
- [CVE-2023-1655](https://cve.now/CVE-2023-1655.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 7.8)
- [CVE-2023-1654](https://cve.now/CVE-2023-1654.md): Denial of Service in gpac/gpac (CVSS 4.8)
- [CVE-2023-0866](https://cve.now/CVE-2023-0866.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 7.8)
- [CVE-2023-0819](https://cve.now/CVE-2023-0819.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 7.8)
- [CVE-2023-0818](https://cve.now/CVE-2023-0818.md): Off-by-one Error in gpac/gpac (CVSS 7.1)
- [CVE-2023-0817](https://cve.now/CVE-2023-0817.md): Buffer Over-read in gpac/gpac (CVSS 7.3)
- [CVE-2023-0770](https://cve.now/CVE-2023-0770.md): Stack-based Buffer Overflow in gpac/gpac (CVSS 7.8)
- [CVE-2023-0760](https://cve.now/CVE-2023-0760.md): Heap-based Buffer Overflow in gpac/gpac (CVSS 7.3)
- [CVE-2023-0358](https://cve.now/CVE-2023-0358.md): Use After Free in gpac/gpac (CVSS 7.8)
- [CVE-2022-3222](https://cve.now/CVE-2022-3222.md): Uncontrolled Recursion in gpac/gpac (CVSS 5.3)
- [CVE-2022-3178](https://cve.now/CVE-2022-3178.md): Buffer Over-read in gpac/gpac (CVSS 7.8)
- [CVE-2022-2549](https://cve.now/CVE-2022-2549.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.7)
- [CVE-2022-2453](https://cve.now/CVE-2022-2453.md): Use After Free in gpac/gpac (CVSS 7.8)
- [CVE-2022-2454](https://cve.now/CVE-2022-2454.md): Integer Overflow or Wraparound in gpac/gpac (CVSS 7.8)
- [CVE-2022-1795](https://cve.now/CVE-2022-1795.md): Use After Free in gpac/gpac (CVSS 7.3)
- [CVE-2022-1222](https://cve.now/CVE-2022-1222.md): Inf loop in gpac/gpac (CVSS 4.0)
- [CVE-2022-1172](https://cve.now/CVE-2022-1172.md): Null Pointer Dereference Caused Segmentation Fault in gpac/gpac (CVSS 5.6)
- [CVE-2022-1035](https://cve.now/CVE-2022-1035.md): Segmentation Fault caused by MP4Box -lsr in gpac/gpac (CVSS 2.9)
- [CVE-2021-4043](https://cve.now/CVE-2021-4043.md): NULL Pointer Dereference in gpac/gpac (CVSS 5.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gpac
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.