CVE-2025-55653

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a zero-denominator fraction string causes gfparselfrac to divide by zero, terminating the process with SIGFPE...

CVE-2025-55654

A use-after-free in the gffilterpidgetpacket function filtercore/filterpid.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted file...

CVE-2025-55640

A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-55667

A segmentation violation in the dumpisomsaps function /mp4box/filedump.c of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

Linux Distros Unpatched Vulnerability : CVE-2025-55653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gfparselfrac function utils/error.c. Processing a crafted MP4 file containing a...

Linux Distros Unpatched Vulnerability : CVE-2025-55667

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A segmentation violation in the dumpisomsaps function /mp4box/filedump.c of GPAC MP4Box v2.5-DEV- rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of...

Linux Distros Unpatched Vulnerability : CVE-2025-55640

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap buffer overflow in the stblAddSize function isomedia/stblwrite.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying a...

Linux Distros Unpatched Vulnerability : CVE-2025-55654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A use-after-free in the gffilterpidgetpacket function filtercore/filterpid.c of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service DoS via supplying...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from the use of the gffilterpidsendeventdownstream function /filtercore/filterpid.c, where a stack reutilization issue exists after the heap is released. This could allow attacker...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from use-after-free issues in the gffilterpacketdestroy function located at /filtercore/filterpck.c. Attackers can exploit this by providing a specially crafted MPEG-2 file, potentially leading to a...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a null pointer dereference in the StatSFVec2f function located at /scenemanager/scenestats.c, which may allow attackers to cause a denial of service by providing specially crafted MPEG-4 files...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a null pointer dereference in the gfac4presentationchmode function. Attackers can exploit this by providing a specially crafted AC4 file, resulting in a denial of service...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box prior to 2.5 contain a security vulnerability stemming from a stack overflow in the gfbifsdecnode function located at /bifs/fielddecode.c . Attackers can exploit this by providing specially crafted MP4 files, potentially leading to a denial of service...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 26.07.0. This vulnerability stems from an out-of-bounds read in the gfodfac4cfgdsiv1 function located at /odf/descriptors.c, which may allow attackers to cause a denial of service by providing a specially crafted AC4 file...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to a certain date contained a security vulnerability. This vulnerability stemmed from a null pointer dereferencing in the dasherinserttimelineentry function /filters/dasher.c. Attackers could exploit this vulnerability by providing a specially crafted MP4 file,...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a segmentation violation in the gfisomgetesd function located at /isomedia/isomread.c; it may allow attackers to cause a denial of service by providing specially crafted XML files...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from heap reuse after a use-after-free in the dasherflushsegment function /filters/dasher.c. Attackers can exploit this by providing a specially crafted MP4 file, resulting in a denial of service...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a use-after-free issue in the gfodfac4cfgcleanlist function located in /odf/descriptors.c. Attackers can exploit this by providing a specially crafted AC4 file, resulting in a denial of service...

GPAC MP4Box security vulnerability

A security vulnerability exists in GPAC MP4Box versions prior to 2.5. This vulnerability stems from a segmentation fault in the GetESD function located at /isomedia/track.c. Attackers can exploit this by providing a specially crafted MP4 file, potentially leading to a denial of service...

GPAC MP4Box security vulnerability

Versions of GPAC MP4Box 2.5 prior to the current version contain security vulnerabilities. These vulnerabilities stem from a segmentation violation in the checkmediaprofile function, which could allow attackers to cause denial-of-service attacks by providing specially crafted MP4 files...