Lucene search
K

21 matches found

NVD
NVD
added 4 days ago5 views

CVE-2025-60464

A use-after-free in the gfseiloadfromstateinternal function /filters/seiload.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 TS file...

7.8CVSS0.00133EPSS
Exploits0References6
CVE
CVE
added 4 days ago9 views

CVE-2025-60464

GPAC MP4Box contains a use-after-free in gf_sei_load_from_state_internal (in /filters/sei_load.c) affecting builds before 26.02.0. This vulnerability can allow a Denial of Service when processing a crafted MPEG-2 TS file. The issue is described across multiple sources (NVD/NVD variant, AttackersK...

7.8CVSS5.9AI score0.00133EPSS
Exploits0References6
Cvelist
Cvelist
added 4 days ago17 views

CVE-2025-60464

A use-after-free in the gfseiloadfromstateinternal function /filters/seiload.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 TS file...

0.00133EPSS
Exploits0References5
Positive Technologies
Positive Technologies
added 4 days ago8 views

PT-2026-52558

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0 Description A use-after-free issue exists in the gf sei load from state internal function located in /filters/sei load.c. This occurs when the software processes a specially crafted MPEG-2 TS file,...

7.8CVSS5.7AI score0.00133EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2026/06/02 4:3 a.m.13 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2026/06/02 12:0 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2025-60486

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS vi...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References3
NVD
NVD
added 2026/06/01 3:16 p.m.12 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS0.0013EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/06/01 12:0 a.m.9 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.8AI score0.0013EPSS
Exploits0References4
Cvelist
Cvelist
added 2026/06/01 12:0 a.m.31 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

0.0013EPSS
Exploits0References4
ATTACKERKB
ATTACKERKB
added 2026/06/01 12:0 a.m.8 views

CVE-2025-60486

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.8AI score0.0013EPSS
Exploits0References5
EUVD
EUVD
added 2026/06/01 12:0 a.m.9 views

EUVD-2025-210006

A heap use-after-free in the dasherprocess function /filters/dasher.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted MPEG-2 file...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References4
CVE
CVE
added 2026/06/01 12:0 a.m.19 views

CVE-2025-60486

Affected software: GPAC Project/MP4Box. Vulnerability: heap use-after-free in the dasher_process function ( /filters/dasher.c ). Root cause: heap-use-after-free flaw that can be triggered via crafted MPEG-2 input. Impact: Denial of Service (DoS). Versions: vulnerable before 26.02.0. Exploitation ...

5.5CVSS5.8AI score0.0013EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2025/07/16 12:0 a.m.6 views

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the MPEG-2 Video Extension codec in Microsoft Windows operating systems relates to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

7.8CVSS5.8AI score0.00352EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:38 a.m.2 views

SUSE CVE-2021-38381

Live555 through 1.08 does not handle MPEG-1 or 2 files properly. Sending two successive RTSP SETUP commands for the same track causes a Use-After-Free and daemon crash...

6.5CVSS6.9AI score0.0119EPSS
Exploits1References3
CNNVD
CNNVD
added 2021/08/10 12:0 a.m.4 views

Live555资源管理错误漏洞

Live555 is a cross-platform C open source project that provides a solution for streaming media, which implements support for standard streaming media delivery protocols such as RTP/RTCP, RTSP, SIP, etc. A security vulnerability exists in Live555, which stems from the fact that the affected produc...

6.5CVSS5.7AI score0.0119EPSS
Exploits1References3
CNVD
CNVD
added 2018/07/25 12:0 a.m.2 views

Bento4 Buffer Overflow Vulnerability (CNVD-2019-07062)

Bento4 is an open source C++ library for reading and writing MP4 files. A buffer overflow vulnerability exists in the 'AP4Mpeg2TsAudioSampleStream::WriteSample' function in the Core/Ap4Mpeg2Ts.cpp file in Bento4 version 1.5.1-624, which can be exploited by an attacker to can be exploited to cause...

8.8CVSS8.8AI score0.0148EPSS
Exploits1References1
CNVD
CNVD
added 2017/12/05 12:0 a.m.3 views

Google Android Media framework (libmpeg2) Extinct Service Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA. media framework libmpeg2 is one of the mpeg2 decoding libraries used for multimedia development. A denial of service vulnerability exists in Media frameworklibmpeg2 in Android. A...

7.1CVSS6.8AI score0.00428EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/10 12:0 a.m.2 views

Android Media framework mpeg2 decoder remote code execution vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handset Alliance OHA, and Media framework mpeg2 decoder is one of the mpeg2 decoders used for multimedia development. A remote code execution vulnerability exists in the Media framework mpeg2 decoder in...

9.3CVSS8.1AI score0.01378EPSS
Exploits0References1
OSV
OSV
added 2017/08/09 9:29 p.m.2 views

CVE-2017-0719

A remote code execution vulnerability in the Android media framework mpeg2 decoder. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273673...

7.8CVSS6.3AI score0.01378EPSS
Exploits0References2
OSV
OSV
added 2017/08/09 9:29 p.m.2 views

CVE-2017-0718

A remote code execution vulnerability in the Android media framework mpeg2 decoder. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37273547...

7.8CVSS6.3AI score0.01378EPSS
Exploits0References2
Rows per page
Query Builder