GPAC

by GPACv26.07

Last updated Aug 31, 2026

Ultramedia Open Source Infrastructure for Video Streaming and Next-Gen Multimedia Transcoding, Packaging and Delivery.

Install with winget

$ winget install --id GPAC.GPAC --exact --version 26.07

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for GPAC

GPAC uses EXE (NSIS). The silent install switches are /S.

One-line silent install (x64, machine scope)

gpac-26.07-rev0-ga07cbfff-master-x64.exe /S

See the full silent install reference for GPAC →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

From $49/month. No credit card required.

Not on Intune? Pckgr RMM deploys and patches apps like this one on any Windows fleet. Free for up to 5 devices.

About

The GPAC Open Source framework empowers the seamless handling of a diverse range of multimedia elements. It is an all-in-one solution for processing, inspecting, packaging, streaming, playback and interaction with media content.

GPAC handles audio, video, subtitles, metadata, scalable graphics, encrypted media, 2D/3D graphics and ECMAScript to enable the most beautiful and unimaginable ultramedia experiences. GPAC’s comprehensive suite of tools, including the renowned MP4Box and the versatile gpac application, offer robust functionality for media manipulation, packaging and streaming.

Installers · v26.07

Architecture	Type	Scope	Install	Download
x86	EXE NSIS	machine		Direct
x64	EXE NSIS	machine		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

medium6.5Patched in wingetCVE-2026-79522affects v26.07.0Sep 9, 2026
An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.
Patch Vendor advisory
medium6.5Patched in wingetCVE-2026-79514affects v26.07.0Sep 9, 2026
An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.
Patch Vendor advisory
medium6.5Patched in wingetCVE-2026-79513affects v26.07.0Sep 9, 2026
A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.
Patch Vendor advisory
medium6.1Patched in wingetCVE-2025-60465affects before 26.02.0Jun 25, 2026
A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Patch
high7.8Patched in wingetCVE-2025-60464affects before 26.02.0Jun 25, 2026
A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 TS file.
Patch
medium5.5Patched in wingetCVE-2025-60473affects before 26.02.0Jun 25, 2026
A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.
Patch
medium5.0Patched in wingetCVE-2025-60466affects before 26.02.0Jun 25, 2026
A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Patch
high7.5Patched in wingetCVE-2025-60474affects before 26.02.0Jun 24, 2026
A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
Patch

Showing 8 of 25. Source: NVD, updated 2h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Not on Intune? Patch it with Pckgr RMM, free for up to 5 devices.

Related apps

Discord CanaryDiscord Inc.
Discord.Discord.Canaryv1.0.1284
Your Place to Talk and Hang Out
FFmpegGyan
Gyan.FFmpegv9.0.2
A complete, cross-platform solution to record, convert and stream audio and video.
Discord CanaryDiscord Inc.
Discord.Discord.Canary.x86v1.0.328
Your Place to Talk and Hang Out
yt-dlpyt-dlp
yt-dlp.yt-dlpv2026.10.26
A feature-rich command-line audio/video downloader.
R
rtkrtk-ai
rtk-ai.rtkv1.1.0
CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
CapCutBytedance Pte. Ltd.
ByteDance.CapCutv9.4.0.4015
A video editing tool packed with features on your desktop or laptop

More from GPAC or browse audio, codec, convert.

Frequently asked questions

How do I install GPAC on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id GPAC.GPAC --exact --version 26.07. winget downloads the installer from GPAC and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install GPAC silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id GPAC.GPAC --exact 26.07 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

What are the silent install switches for GPAC?

GPAC uses EXE (NSIS). Run the downloaded installer with: gpac-26.07-rev0-ga07cbfff-master-x64.exe /S. The silent switches are /S.

How do I uninstall GPAC via winget?

Run: winget uninstall --id GPAC.GPAC --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from GPAC's Apps & Features entry.

Is GPAC free?

GPAC is distributed under LGPL-2.1. Refer to the publisher (https://gpac.io/downloads/gpac-nightly-builds/) for the full license terms - Wingetly itself does not charge for installation.

Does GPAC work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls GPAC directly from the publisher.

How do I keep GPAC up to date?

Run winget upgrade --id GPAC.GPAC --exact, or winget upgrade --all to update everything winget tracks. We index 4 versions of GPAC from microsoft/winget-pkgs.

Recent versions

26.07latest
26.02
2.4
2.2.1