CNNVD-202601-2598 Information

CNNVD ID

CNNVD-202601-2598

CVE-2025-70308

  • CNNVD Published: 2026-01-15

Description (Chinese)

GPAC是GPAC开源的一款开源的多媒体框架。 GPAC v2.4.0版本存在安全漏洞,该漏洞源于GSF解复用器过滤器组件存在越界读取,可能导致拒绝服务。

Description (English)

GPAC is an open-source multimedia framework for GPS open sources. Version GPAC v2.4.0 contains a security loophole which stems from the presence of a cross-border readout of the GSF reusable filter component, which may lead to the denial of service.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

GPAC

Published

2026-01-15

Last Modified

2026-02-24

References

https://github.com/zakkanijia/POC/blob/main/gpac_gsf/GPAC_gsf.md https://access.redhat.com/security/cve/cve-2025-70308

Share on: