Where
-Infinity
0

Trending

Last week
Last month
Last year

Gpac Project MP4BoxGPAC/MP4Box: Heap Use-After-Free in AC-4 Descriptor Cleanup

Risk 34
Severity
5.5
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A heap use-after-free in the gfodfac4cfgcleanlist function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60482

Gpac Project MP4BoxDivide by zero in GPAC/MP4Box framer via crafted truncated MP4 file

Risk 34
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A Floating-Point Exception (FPE) in the reframersendpacket function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

First published (updated )
CVE-2025-60496

Gpac Project MP4Boxheap use-after-fe in GPAC/MP4Box gf_filter_pid_send_event_downstam via crafted MPEG-2 TS input

Risk 34
Severity
5.5
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A heap use-after-free in the gffilterpidsendeventdownstream function (/filtercore/filterpid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60490

Gpac Project MP4BoxHeap use-after-fe in GPAC/MP4Box AC-4 descriptor cleanup

Risk 34
Severity
5.5
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A heap use-after-free in the gfodfac4cfgcleanlist function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60476

Gpac Project MP4BoxBuffer Overflow

Risk 31
Severity
5.5
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A heap buffer overflow in the gfodfac4cfgalternativeinfo function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60480

Gpac Project MP4BoxGPAC/MP4Box: Global Buffer Overflow ad in gf_ac4_parser_bs on crafted AC-4 stam

Risk 34
Severity
5.5
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A buffer overflow in the gfac4parserbs function (/mediatools/avparsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60475

Gpac Project MP4Boxuncontrolled cursion in GPAC/MP4Box BIFS decoder via crafted MP4 input

Risk 34
Severity
5.5
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A stack overflow in the gfbifsdecnode function (/bifs/fielddecode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60492

Gpac Project MP4BoxNULL pointer defence in GPAC/MP4Box AC-4 parser via crafted file

Risk 34
Severity
5.5
Null Pointer Dereference
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A NULL pointer dereference in the gfac4presentationchmode function (/mediatools/avparsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60469

Gpac Project MP4BoxNULL pointer defence in GPAC/MP4Box GetESD via crafted MP4 input

Risk 34
Severity
5.5
Buffer Overflow
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

First published (updated )
CVE-2025-60497

Gpac Project MP4BoxHeap use-after-fe in GPAC/MP4Box packet destruction via crafted MPEG-2 TS file

Risk 34
Severity
5.5
Use After Free
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

A use-after-free in the gffilterpacketdestroy function (/filtercore/filterpck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file.

1 / 2
Source: Ubuntu
First published (updated )
CVE-2025-60478

Gpac Project MP4BoxHeap-based Buffer Overflow in GPAC/MP4Box via gf_media_import on crafted MPEG-2 TS file

Risk 46
Severity
7.5
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A buffer overflow in the gfmediaimport function (/mediatools/avparsers.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.

First published (updated )
CVE-2025-60474

Gpac Project MP4BoxExpid Pointer Defence in GPAC/MP4Box via gf_filter_pid_get_packet on crafted MPEG-2 TS file

Risk 30
Severity
5
Use After Free
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

A use-after-free in the gffilterpidgetpacket function (/filtercore/filterpid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.

First published (updated )
CVE-2025-60466

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203