GPAC vulnerabilities
Every vulnerability this feed holds for GPAC, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
3 vulnerabilities tracked. 1 with public exploit code.
- 6.8 GPAC through 26.07.0 contains a type confusion vulnerability in drawablegetaspect2dmpeg4() and TraverseShape() that casts a Shape's…
- 6.8 GPAC through 26.07.0 contains a type confusion vulnerability in gfsgcommandapply() in src/scenegraph/commands.c that fails to verify BIFS…
- 5.8 NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that GPAC is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Linux Red Hat Google Microsoft Apple Apache Software Foundation zephyrproject Oracle Corporation n/a Unknown JetBrains Hewlett Packard Enterprise (HPE) Drupal Tanium IBM Eclipse Foundation Samsung Semiconductor SuiteCRM wazuh HCL Software Gnome MONGODB kyverno vercel