A heap overflow in the uncv_parse_config() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
References
| Link | Resource |
|---|---|
| https://github.com/zakkanijia/POC/blob/main/gpac_uncv/GPAC_UNCV_CPAT.md | Exploit Third Party Advisory |
Configurations
History
23 Jan 2026, 19:11
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gpac
Gpac gpac |
|
| CPE | cpe:2.3:a:gpac:gpac:2.4.0:*:*:*:*:*:*:* | |
| References | () https://github.com/zakkanijia/POC/blob/main/gpac_uncv/GPAC_UNCV_CPAT.md - Exploit, Third Party Advisory |
15 Jan 2026, 19:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-15 19:16
Updated : 2026-01-23 19:11
NVD link : CVE-2025-70303
Mitre link : CVE-2025-70303
CVE.ORG link : CVE-2025-70303
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-122
Heap-based Buffer Overflow