CVE-2025-70298

Impact

GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/zakkanijia/POC/blob/main/dmx_ogg/GPAC_oggdmx_parse_tags_offbyone.md