CNNVD-202601-2583 Information

CNNVD ID

CNNVD-202601-2583

CVE-2025-70299

  • CNNVD Published: 2026-01-15

Description (Chinese)

GPAC是GPAC开源的一款开源的多媒体框架。 GPAC v2.4.0版本存在安全漏洞,该漏洞源于avi_parse_input_file函数存在堆溢出,可能导致拒绝服务。

Description (English)

GPAC is an open-source multimedia framework for GPS open sources. GPAC v2.4.0 has a security loophole, which stems from the spill of the avi parse input file function, which may lead to the denial of service.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

GPAC

Published

2026-01-15

Last Modified

2026-02-24

References

https://github.com/zakkanijia/POC/blob/main/gpac_avi/GPAC_AVI_indx_heap_overflow.md https://access.redhat.com/security/cve/cve-2025-70299

Share on: