Cloudanix VulnDB

CVE-2025-70302

Medium · 5.5

CVSS

5.5

EPSS

0.2%

Published

Jan 15, 2026

CISA due date

—

The record

A heap overflow in the ghi_dmx_declare_opid_bin() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted input.

Affected packages

Ecosystem Package Introduced Fixed