EUVD-2025-211163

A segmentation violation in the GetESD function /isomedia/track.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60492

GPAC Project/MP4Box versions before 2.5 are vulnerable to a stack overflow within the gf_bifs_dec_node function located in /bifs/field_decode.c. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted MP4 file . While the provided documents confirm the e...

CVE-2025-60489

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

EUVD-2025-211162

A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60491

A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60491

A heap use-after-free vulnerability exists in the dasher_flush_segment function (located in /filters/dasher.c) of GPAC Project/MP4Box versions prior to 2.5 . An attacker can exploit this flaw by supplying a crafted MP4 file to cause a Denial of Service (DoS) . No specific exploit links or mitigat...

EUVD-2025-211159

A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60490

The GPAC Project/MP4Box software (versions before 2.5 ) contains a heap use-after-free vulnerability within the gf_filter_pid_send_event_downstream function located in /filter_core/filter_pid.c. An attacker can exploit this flaw by supplying a crafted MP4 file to trigger a Denial of Service (DoS)...

CVE-2025-60490

A heap use-after-free in the gffilterpidsendeventdownstream function /filtercore/filterpid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

EUVD-2025-211149

A NULL pointer dereference in the dasherinserttimelineentry function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120629

A heap use-after-free in the gf filter pid send event downstream function /filter core/filter pid.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

EUVD-2025-211164

A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60497

The GPAC Project/MP4Box software, specifically versions prior to 2.5 , is vulnerable to a segmentation violation in the GetESD function located at /isomedia/track.c. An attacker can exploit this flaw by supplying a crafted MP4 file to cause a Denial of Service (DoS) . The vulnerability is categor...

CVE-2025-60491

A heap use-after-free in the dasherflushsegment function /filters/dasher.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120630

A stack overflow in the gf bifs dec node function /bifs/field decode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

PT-2026-120631

A segmentation violation in the check media profile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60493

A segmentation violation in the checkmediaprofile function /mp4box/mp4box.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60492

A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

EUVD-2025-211161

A stack overflow in the gfbifsdecnode function /bifs/fielddecode.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted MP4 file...

CVE-2025-60493

GPAC Project/MP4Box versions before 2.5 are vulnerable to a segmentation violation within the check_media_profile function located in /mp4box/mp4box.c. An attacker can exploit this flaw by providing a crafted MP4 file to trigger a Denial of Service (DoS) . No specific remediation or exploit links...