GPAC

by GPACv26.07

Last updated Jul 27, 2026

Ultramedia Open Source Infrastructure for Video Streaming and Next-Gen Multimedia Transcoding, Packaging and Delivery.

Install with winget

$ winget install --id GPAC.GPAC --exact --version 26.07

Run in Command Prompt, PowerShell, or Windows Terminal. Prompts for any agreements.

Silent install command for GPAC

GPAC uses EXE (NSIS). The silent install switches are /S.

One-line silent install (x64, machine scope)

gpac-26.07-rev0-ga07cbfff-master-x64.exe /S

See the full silent install reference for GPAC →

Built by Pckgr

For Intune admins

Stop chasing app updates. Pckgr patches them for you.

Automated application patching for Microsoft Intune. Pckgr keeps a curated library of 1,000+ apps continuously up-to-date in your tenant via Microsoft Graph - no manual repackaging, no chasing vendor sites.

Start free 30-day trial

No credit card required.

About

The GPAC Open Source framework empowers the seamless handling of a diverse range of multimedia elements. It is an all-in-one solution for processing, inspecting, packaging, streaming, playback and interaction with media content.

GPAC handles audio, video, subtitles, metadata, scalable graphics, encrypted media, 2D/3D graphics and ECMAScript to enable the most beautiful and unimaginable ultramedia experiences. GPAC’s comprehensive suite of tools, including the renowned MP4Box and the versatile gpac application, offer robust functionality for media manipulation, packaging and streaming.

Installers · v26.07

Architecture	Type	Scope	Install	Download
x86	EXE NSIS	machine		Direct
x64	EXE NSIS	machine		Direct

Copy a command tailored to that specific architecture, type, and scope - useful when winget would otherwise pick a different default.

Security

25 known CVEs via NVD

medium6.1Patched in wingetCVE-2025-60465affects before 26.02.0Jun 25, 2026
A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Patch
high7.8Patched in wingetCVE-2025-60464affects before 26.02.0Jun 25, 2026
A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 TS file.
Patch
medium5.5Patched in wingetCVE-2025-60473affects before 26.02.0Jun 25, 2026
A NULL pointer dereference in the gf_filter_in_parent_chain function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.
Patch
medium5.0Patched in wingetCVE-2025-60466affects before 26.02.0Jun 25, 2026
A use-after-free in the gf_filter_pid_get_packet function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Patch
high7.5Patched in wingetCVE-2025-60474affects before 26.02.0Jun 24, 2026
A buffer overflow in the gf_media_import function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
Patch
high7.5Patched in wingetCVE-2025-60467affects before 26.02.0Jun 24, 2026
A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Patch
medium5.5Patched in wingetCVE-2025-60468affects before 26.02.0Jun 24, 2026
GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service (local). The component is: filter_core/filter_pid.c (L:574-580): function gf_filter_pid_inst_swap_delete_task() imp...
Patch
medium5.5Patched in wingetCVE-2025-60471affects before 26.02.0Jun 24, 2026
A use-after-free in the gf_filter_pid_reconfigure_task_discard function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Patch

Showing 8 of 25. Source: NVD, updated 4h ago. Patch status is best-effort: NVD's fix version is compared against the latest version in winget, but the two version formats don't always align. Confirm with the vendor advisory before treating any specific build as safe.

See a CVE that affects your fleet? Push the patched version to Intune in one click with Pckgr - automated patching is the only way to keep up.

Related apps

FFmpegGyan
Gyan.FFmpegv8.1.2
A complete, cross-platform solution to record, convert and stream audio and video.
yt-dlpyt-dlp
yt-dlp.yt-dlpv2026.07.04
A feature-rich command-line audio/video downloader.
R
rtkrtk-ai
rtk-ai.rtkv0.44.0
CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
Discord CanaryDiscord Inc.
Discord.Discord.Canary.x86v1.0.328
Your Place to Talk and Hang Out
Discord CanaryDiscord Inc.
Discord.Discord.Canaryv1.0.1072
Your Place to Talk and Hang Out
mpv.netFrank Skare (stax76)
mpv.netv7.1.2.0
mpv.net is a media player for Windows with a modern GUI.

More from GPAC or browse audio, codec, convert.

Frequently asked questions

How do I install GPAC on Windows?

Open Windows Terminal, PowerShell, or Command Prompt and run: winget install --id GPAC.GPAC --exact --version 26.07. winget downloads the installer from GPAC and runs it. Requires Windows 10 (1809+) or Windows 11.

How do I install GPAC silently for unattended deployment?

Add --silent and accept the agreements upfront: winget install --id GPAC.GPAC --exact 26.07 --silent --accept-package-agreements --accept-source-agreements. This is the variant Intune, Configuration Manager, and other deployment tools should use.

What are the silent install switches for GPAC?

GPAC uses EXE (NSIS). Run the downloaded installer with: gpac-26.07-rev0-ga07cbfff-master-x64.exe /S. The silent switches are /S.

How do I uninstall GPAC via winget?

Run: winget uninstall --id GPAC.GPAC --exact. Add --silent for unattended uninstalls. winget will use the registered uninstaller from GPAC's Apps & Features entry.

Is GPAC free?

GPAC is distributed under LGPL-2.1. Refer to the publisher (https://gpac.io/downloads/gpac-nightly-builds/) for the full license terms - Wingetly itself does not charge for installation.

Does GPAC work on Windows 10?

Yes, as long as your Windows 10 build supports winget (1809 or newer). winget ships with App Installer on Windows 10/11 and pulls GPAC directly from the publisher.

How do I keep GPAC up to date?

Run winget upgrade --id GPAC.GPAC --exact, or winget upgrade --all to update everything winget tracks. We index 4 versions of GPAC from microsoft/winget-pkgs.

Recent versions

26.07latest
26.02
2.4
2.2.1