Skip to content
OpenAdvisories
High · 7.5 CVE-2024-24267 EUVD-2024-21691GHSA-xwmx-qhv2-jx64

gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.

Published Feb 5, 2024 · Updated Sep 15, 2025 · Assigned by mitre

Description

gpac v2.2.1 (fixed in v2.4.0) was discovered to contain a memory leak via the gfio_blob variable in the gf_fileio_from_blob function.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 11 gpac No fix yet —
ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS gpac No fix yet —
Ubuntu Pro 22.04 LTS gpac No fix yet —
Ubuntu Pro 20.04 LTS gpac No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS gpac No fix yet —
Ubuntu Pro 16.04 LTS gpac No fix yet —
Ubuntu Pro 14.04 LTS gpac No fix yet —

References