[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkv9XlQRr8LxFgsOqw3OlIsHuUEC01eiIBfb8zFZdKac":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":27,"kevVulnerabilities":77,"topProductsByCves":83,"seoMetadata":86,"meta":95},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":26},12637,"gpac",2,353,1,52,"2025-07-18","g",[16,20],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},51504,50,349,{"id":21,"product_name":22,"version_count":9,"cve_count":23,"kev_count":24,"last_cve_update":25},51505,"mp4box",4,0,"2022-06-16","Gpac is a technology vendor with 2 tracked products and 353 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[28,36,45,52,56,61,67,69,71,74],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":4,"epssScore":35},"CVE-2021-4043","NULL Pointer Dereference in GitHub repository gpac\u002Fgpac prior to 1.1.0.","2022-02-04",5.5,"v3.1","Medium",0.04615,{"cveId":37,"description":38,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":44},"CVE-2018-13005","An issue was discovered in MP4Box in GPAC 0.7.1. The function urn_Read in isomedia\u002Fbox_code_base.c has a heap-based buffer over-read.","2018-06-29",9.8,"v3.0","Critical",false,0.02542,{"cveId":46,"description":47,"publishedDate":48,"cvssScore":49,"cvssVersion":41,"severity":50,"isKev":43,"epssScore":51},"CVE-2019-13618","In GPAC before 0.8.0, isomedia\u002Fisom_read.c in libgpac.a has a heap-based buffer over-read, as demonstrated by a crash in gf_m2ts_sync in media_tools\u002Fmpegts.c.","2019-07-16",7.5,"High",0.02344,{"cveId":53,"description":54,"publishedDate":39,"cvssScore":40,"cvssVersion":41,"severity":42,"isKev":43,"epssScore":55},"CVE-2018-13006","An issue was discovered in MP4Box in GPAC 0.7.1. There is a heap-based buffer over-read in the isomedia\u002Fbox_dump.c function hdlr_dump.",0.02306,{"cveId":57,"description":58,"publishedDate":59,"cvssScore":40,"cvssVersion":33,"severity":42,"isKev":43,"epssScore":60},"CVE-2021-28300","NULL Pointer Dereference in the \"isomedia\u002Ftrack.c\" module's \"MergeTrack()\" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.","2021-04-14",0.02082,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":33,"severity":50,"isKev":43,"epssScore":66},"CVE-2021-21838","Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.","2021-08-18",8.8,0.0201,{"cveId":68,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":33,"severity":50,"isKev":43,"epssScore":66},"CVE-2021-21839",{"cveId":70,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":33,"severity":50,"isKev":43,"epssScore":66},"CVE-2021-21837",{"cveId":72,"description":73,"publishedDate":64,"cvssScore":65,"cvssVersion":33,"severity":50,"isKev":43,"epssScore":66},"CVE-2021-21845","Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.",{"cveId":75,"description":76,"publishedDate":64,"cvssScore":65,"cvssVersion":33,"severity":50,"isKev":43,"epssScore":66},"CVE-2021-21843","Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. After validating the number of ranges, at [41] the library will multiply the count by the size of the GF_SubsegmentRangeInfo structure. On a 32-bit platform, this multiplication can result in an integer overflow causing the space of the array being allocated to be less than expected. An attacker can convince a user to open a video to trigger this vulnerability.",[78],{"cveId":29,"description":30,"publishedDate":31,"cvssScore":32,"cvssVersion":33,"severity":34,"isKev":4,"epssScore":35,"cisaVulnName":79,"cisaDateAdded":80,"cisaShortDescription":81,"cisaRequiredAction":82},"Motion Spell GPAC Null Pointer Dereference Vulnerability","2024-09-30","Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service (DoS) condition.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",[84,85],{"id":17,"product_name":8,"version_count":18,"cve_count":19,"kev_count":11,"last_cve_update":13},{"id":21,"product_name":22,"version_count":9,"cve_count":23,"kev_count":24,"last_cve_update":25},{"title":87,"metaDescription":88,"keywords":89,"structuredData":90},"Gpac - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Gpac covering 2 products with 353 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Gpac vulnerabilities, Gpac security, Gpac CVE, Gpac threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Gpac KEV, Gpac exploited vulnerabilities",{"@context":91,"@type":92,"name":93,"description":88,"url":94},"https:\u002F\u002Fschema.org","Organization","Gpac","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fgpac",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":96,"apiVersion":97},"2026-10-28T16:27:53.763Z","3.0"]