A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .ogg file.
References
| Link | Resource |
|---|---|
| https://github.com/zakkanijia/POC/blob/main/gpac_dec_vorbis/GPAC_VORBIS.md | Exploit Third Party Advisory |
Configurations
History
23 Jan 2026, 17:34
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Gpac
Gpac gpac |
|
| CPE | cpe:2.3:a:gpac:gpac:2.4.0:*:*:*:*:*:*:* | |
| References | () https://github.com/zakkanijia/POC/blob/main/gpac_dec_vorbis/GPAC_VORBIS.md - Exploit, Third Party Advisory |
15 Jan 2026, 17:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-15 17:16
Updated : 2026-01-23 17:34
NVD link : CVE-2025-70310
Mitre link : CVE-2025-70310
CVE.ORG link : CVE-2025-70310
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-122
Heap-based Buffer Overflow