CNNVD-202601-2575 Information

CNNVD ID

CNNVD-202601-2575

CVE-2025-70303

  • CNNVD Published: 2026-01-15

Description (Chinese)

GPAC是GPAC开源的一款开源的多媒体框架。 GPAC v2.4.0版本存在安全漏洞,该漏洞源于uncv_parse_config函数存在堆溢出,可能导致拒绝服务。

Description (English)

GPAC is an open-source multimedia framework for GPS open sources. There is a security loophole in version GPAC v2.4.0, which originates from the overflow of the uncv parse config function, which may lead to the denial of service.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

GPAC

Published

2026-01-15

Last Modified

2026-02-24

References

https://github.com/zakkanijia/POC/blob/main/gpac_uncv/GPAC_UNCV_CPAT.md https://access.redhat.com/security/cve/cve-2025-70303

Share on: