Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-52293
7.5
HIGHCVSS v3
Published
June 9, 2026
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data.
gpac/gpac
GitHubGPAC Ultramedia OSS for Video Streaming & Next-Gen Multimedia Transcoding, Packaging & Delivery
GitHubGPAC Ultramedia OSS for Video Streaming & Next-Gen Multimedia Transcoding, Packaging & Delivery= 2.4NVD
makesoftwaresafe/gpacGitHubModular Multimedia framework for packaging, streaming and playing your favorite content.
GitHubModular Multimedia framework for packaging, streaming and playing your favorite content.= 2.4NVD