A buffer overflow in the vobsub_get_subpic_duration() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted packet.
References
| Link | Resource |
|---|---|
| https://github.com/zakkanijia/POC/blob/main/gpac_vobsub/GPAC_vobsub.md | Exploit Third Party Advisory |
Configurations
History
23 Jan 2026, 17:36
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/zakkanijia/POC/blob/main/gpac_vobsub/GPAC_vobsub.md - Exploit, Third Party Advisory | |
| CPE | cpe:2.3:a:gpac:gpac:2.4.0:*:*:*:*:*:*:* | |
| First Time |
Gpac
Gpac gpac |
15 Jan 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-15 17:16
Updated : 2026-01-23 17:36
NVD link : CVE-2025-70304
Mitre link : CVE-2025-70304
CVE.ORG link : CVE-2025-70304
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-121
Stack-based Buffer Overflow
