CVE-2022-24249: Gpac

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.

Affected products

• Gpac Gpac: before 2.0.0 (fixed in 2.0.0)

Published 2022-02-04. Last modified 2026-06-17.