CVE-2025-55667: Buffer Overflow
A segmentation violation in the dumpisomsaps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
Affected Software
Event History
Frequently Asked Questions
What access and interaction are required to trigger the denial of service?
The CVSS vector indicates local attack access, no privileges required, and user interaction required. An attacker must supply a crafted MP4 file that is processed by MP4Box.
What is the operational impact of successful exploitation?
Successful exploitation can cause a denial of service through a segmentation violation in the dump_isom_saps function. The provided data does not indicate confidentiality or integrity impact.
Which MP4Box build is identified as affected?
The affected build is identified as GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-master. The supplied data does not state whether other versions or default configurations are affected.