6.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
27.5%
The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
github.com/gpac/gpac/commit/b8f8b202d4fc23eb0ab4ce71ae96536ca6f5d3f8
github.com/gpac/gpac/issues/1757