Heap Overflow Vulnerability in GPAC Software by GPAC Project
CVE-2025-70299

6.5MEDIUM

Key Information:

Vendor: GPAC Project
Status: GPAC
Vendor: CVE Published:; 15 January 2026

🔔 Create GPAC Project Vulnerability Alert

What is CVE-2025-70299?

A vulnerability exists in the GPAC media framework where the avi_parse_input_file() function is susceptible to heap overflow. This flaw could allow an attacker to execute a tailored attack using a specially crafted AVI file, resulting in a Denial of Service (DoS). Users and administrators are advised to review their GPAC v2.4.0 installations and apply necessary updates or mitigations to safeguard against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/zakkanijia/POC/blob/main/gpac_avi/GPAC...

CVSS V3.1

Score:

6.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

None

Availability:

None

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

Required

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 15, 2026
Vulnerability Reserved
Jan 9, 2026

JSON

GPAC Project

What is CVE-2025-70299?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.