CVE-2024-50664: Gpac

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

gpac 2.4 contains a heap-buffer-overflow at isomedia/sample_descs.c:1799 in gf_isom_new_mpha_description in gpac/MP4Box.

Affected products

• Gpac Gpac: version 2.4 only

Published 2025-01-23. Last modified 2026-06-17.