TI-2025-07122 Aliases CVE-2025-7797 GHSA-45x8-4rg4-4ffp

GPAC dash_client.c gf_dash_download_init_segment null pointer dereference

HIGH 70CWE-404Published 2025-07-18 · Updated 2025-07-18

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Attack requirements: None
Impact type: Denial of service
Confidentiality · integrity · availability: None · None · Low
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-404.

Summary

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf_dash_download_init_segment of the file src/media_tools/dash_client.c. The manipulation of the argument base_init_url leads to null pointer dereference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 153ea314b6b053db17164f8bc3c7e1e460938eaa. It is recommended to apply a patch to fix this issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.01084 65th percentileScored 2026-11-07

Public exploit Yes 1 exploit referenceTagged by the CNA and NVD

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	GPAC	2.0; 2.1; 2.2; 2.3; 2.4	—	No fix listed	CNA

GPAC Vendor— Affected 2.0; 2.1; 2.2; 2.3; 2.4 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:a:gpac:gpac::::::::	up to 2.4.0	Vulnerable	gpac

cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:* Versions up to 2.4.0 Vulnerable ·gpac

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2025-7797
2026-10-03 Alias added: GHSA-45x8-4rg4-4ffp

References

Exploit 1

https://drive.google.com/file/d/1Z-C6RajpZ40ujo1iGNt3_mG855mPbs1Q/view?usp=share_link

Patch 1

https://github.com/gpac/gpac/commit/153ea314b6b053db17164f8bc3c7e1e460938eaa

TI-2023-25004 An issue was discovered in gpac version 2.3-DEV-rev588-g7edc40fee-master, allows remote… CVSS 3.1CRITICAL 9.8
TI-2025-43085 GPAC v2.4.0 was discovered to contain an out-of-bounds read in the oggdmx_parse_tags function. CVSS 3.1HIGH 8.2
TI-2024-00295 Stack-based Buffer Overflow in gpac/gpac CVSS 3.1CRITICAL 9.8
TI-2023-25341 Heap Buffer Overflow vulnerability in GPAC version 2.3-DEV-rev617-g671976fcc-master… CVSS 3.1CRITICAL 9.8
TI-2023-02661 NULL Pointer Dereference in gpac/gpac CVSS 3.1CRITICAL 9.8
TI-2026-22173 GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow CVSS 4.0HIGH 7.7

See all 400 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences