[Git][security-tracker-team/security-tracker][master] Add CVE-2025-70116/gpac

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
d70a4710 by Salvatore Bonaccorso at 2026-05-31T17:37:06+02:00
Add CVE-2025-70116/gpac

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -3199,7 +3199,8 @@ CVE-2026-1402 (GitLab has remediated an issue in GitLab CE/EE affecting all vers
 CVE-2026-1248 (IBM Business Automation Workflow containers and traditionalmay leak in ...)
 	NOT-FOR-US: IBM
 CVE-2025-70116 (A NULL pointer dereference in GPAC MP4Box: when parsing certain trunca ...)
-	TODO: check
+	- gpac <removed>
+	NOTE: https://github.com/gpac/gpac/issues/3345
 CVE-2025-70103 (Heap buffer overflow vulnerability in libjxl 0.12.0 via crafted PBM im ...)
 	- jpeg-xl <unfixed>
 	NOTE: https://www.openwall.com/lists/oss-security/2026/05/30/7



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d70a47102a334904712d0d8e453c1f0eddb18bfc

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/d70a47102a334904712d0d8e453c1f0eddb18bfc
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260531/9e0a6432/attachment.htm>