CVE-2025-70310
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Jan 15, 2026
CISA due date
—
The record
A heap overflow in the vorbis_to_intern() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted .ogg file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|