CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 13:23 UTC )
This week: 5,477 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,477 Show in the list Critical, last 7 days 360 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product gpac:gpac . Show all products
88 CVEs, showing 51 to 88 Previous Page 2 of 2 CVE Severity Title Published CVE-2026-90573 Low 3.3 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference Assigned by VulDB
Sep 13, 2026 CVE-2026-90576 Low 3.3 GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference Assigned by VulDB
Sep 13, 2026 CVE-2026-90577 Medium 5.3 GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow Assigned by VulDB
Sep 13, 2026 CVE-2026-90578 Medium 5.3 GPAC MP4Box list.c gf_list_count use after free Assigned by VulDB
Sep 13, 2026 CVE-2026-90609 Low 3.3 GPAC MP4Box vrml_tools.c null pointer dereference Assigned by VulDB
Sep 14, 2026 CVE-2026-90610 Low 3.3 GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read Assigned by VulDB
Sep 14, 2026 CVE-2026-90611 Low 3.3 GPAC MP4Box loader_xmt.c xmt_parse_element assertion Assigned by VulDB
Sep 14, 2026 CVE-2026-90612 Low 3.3 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion Assigned by VulDB
Sep 14, 2026 CVE-2026-90613 Low 3.3 GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion Assigned by VulDB
Sep 14, 2026 CVE-2026-90683 Low 3.3 GPAC MP4Box base_scenegraph.c gf_node_unregister assertion Assigned by VulDB
Sep 14, 2026 CVE-2026-90684 Low 2.8 GPAC MP4Box base_scenegraph.c gf_node_get_field_count assertion Assigned by VulDB
Sep 14, 2026 CVE-2026-90685 Low 2.8 GPAC MP4Box lsr_dec.c lsr_exec_command_list assertion Assigned by VulDB
Sep 14, 2026 CVE-2026-90686 Medium 5.3 GPAC MP4Box loader_bt.c gf_bt_report memory corruption Assigned by VulDB
Sep 14, 2026 CVE-2026-90687 Medium 6.3 GPAC MP4Box base_scenegraph.c gf_node_changed_internal use after free Assigned by VulDB
Sep 14, 2026 CVE-2026-90791 Medium 6.3 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free Assigned by VulDB
Sep 14, 2026 CVE-2026-90792 Medium 4.3 GPAC MP4Box base_scenegraph.c gf_node_list_get_child null pointer dereference Assigned by VulDB
Sep 14, 2026 CVE-2026-90793 Medium 5.4 GPAC MP4Box base_scenegraph.c gf_node_get_name use after free Assigned by VulDB
Sep 14, 2026 CVE-2026-90794 Medium 6.3 GPAC MP4Box vrml_tools.c gf_sg_script_load use after free Assigned by VulDB
Sep 14, 2026 CVE-2026-90824 Low 3.3 GPAC MP4Box dom_events.c gf_sg_dom_event_bubble stack-based overflow Assigned by VulDB
Sep 14, 2026 CVE-2026-90825 Low 3.3 GPAC MP4Box base_scenegraph.c gf_node_unregister use after free Assigned by VulDB
Sep 14, 2026 CVE-2026-90826 Low 2.8 GPAC MP4Box base_scenegraph.c gf_node_del out-of-bounds Assigned by VulDB
Sep 14, 2026 CVE-2026-90827 Low 3.3 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free Assigned by VulDB
Sep 14, 2026 CVE-2026-91086 Medium 6.3 GPAC MPEG Video Reframer reframe_mpgvid.c mpgviddmx_process heap-based overflow Assigned by VulDB
Sep 15, 2026 CVE-2026-91087 High 7.3 GPAC Compositor media_object.c gf_mo_get_od_id use after free Assigned by VulDB
Sep 15, 2026 CVE-2026-91088 Medium 4.8 GPAC URL url.c gf_url_concatenate_ex heap-based overflow Assigned by VulDB
Sep 15, 2026 CVE-2026-91089 Medium 6.3 GPAC base_scenegraph.c gf_node_get_name_and_id use after free Assigned by VulDB
Sep 15, 2026 CVE-2026-91090 Low 3.9 GPAC base_scenegraph.c gf_node_activate_ex stack-based overflow Assigned by VulDB
Sep 15, 2026 CVE-2026-91091 Medium 4.3 GPAC Node Insertion base_scenegraph.c gf_node_list_insert_child memory corruption Assigned by VulDB
Sep 15, 2026 CVE-2026-92399 High 7.3 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow Assigned by VulDB
Sep 16, 2026 CVE-2026-92472 Low 3.3 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free Assigned by VulDB
Sep 16, 2026 CVE-2026-92473 Low 3.3 GPAC BIFS commands.c gf_sg_command_del use after free Assigned by VulDB
Sep 16, 2026 CVE-2026-92474 Low 3.3 GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free Assigned by VulDB
Sep 16, 2026 CVE-2026-92475 Medium 5.3 GPAC downloader.c wait_for_header_and_parse out-of-bounds Assigned by VulDB
Sep 16, 2026 CVE-2026-93331 High 7.3 GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds Assigned by VulDB
Sep 18, 2026 CVE-2026-103227 Medium 6.3 GPAC DASH Client dash_client.c gf_dash_resolve_url buffer overflow Assigned by VulDB
Sep 30, 2026 CVE-2026-108538 Medium 6.3 GPAC MP4Box os_thread.c gf_mx_v use after free Assigned by VulDB
Oct 11, 2026 CVE-2026-108539 Medium 6.3 GPAC MP4Box filter_queue.c gf_fq_pop use after free Assigned by VulDB
Oct 11, 2026 CVE-2026-109827 Medium 6.3 GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write Assigned by VulDB
Oct 13, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
