Linux Distros Unpatched Vulnerability : CVE-2025-55639

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gfisomaddtrackkind function at isomedia/isomwrite.c. This vulnerability allows...

CVE-2025-60474

The GPAC Project/MP4Box packaging tool (versions prior to 26.02.0 ) is vulnerable to a buffer overflow in the gf_media_import function located in /media_tools/av_parsers.c. An attacker can exploit this by providing a specially crafted input signal to cause a Denial of Service (DoS) . While some d...

CVE-2025-60471

A use-after-free vulnerability exists in the gf_filter_pid_reconfigure_task_discard function (located in /filter_core/filter_pid.c) of GPAC Project/MP4Box before version 26.02.0 . An attacker can exploit this flaw by supplying a crafted media file to trigger a Denial of Service (DoS) . This type ...

CVE-2025-60474

A buffer overflow in the gfmediaimport function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2025-60467

A use-after-free in the gffilterpidinstswapdeletetask function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60474

A buffer overflow in the gfmediaimport function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2025-60467

A use-after-free in the gffilterpidinstswapdeletetask function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60471: Use After Free

A use-after-free in the gffilterpidreconfiguretaskdiscard function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60467

A use-after-free vulnerability exists in the gf_filter_pid_inst_swap_delete_task function (located in /filter_core/filter_pid.c) of the GPAC Project/MP4Box multimedia platform. This flaw affects versions before 26.02.0 . An attacker can exploit this by supplying a crafted media file to trigger a ...

CVE-2025-60468: Heap-based Buffer Overflow

GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service local. The component is: filtercore/filterpid.c L:574-580: function gffilterpidinstswapdeletetask improperly accesses freed objects...

ROS-20260624-73-0005

The vulnerability of the swfdefbitsjpeg function in the MP4Box packaging engine of the GPAC multimedia platform is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service failures...

CVE-2025-60471

A use-after-free in the gffilterpidreconfiguretaskdiscard function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60468

The MP4Box component of the GPAC Multimedia Open Source Project (version 2.5-DEV-rev1593-gfe88c3545-master ) is vulnerable to a heap use-after-free (Buffer Overflow) in the filter_core/filter_pid.c file. The issue resides in the gf_filter_pid_inst_swap_delete_task() function, which improperly acc...

CVE-2025-60474: Stack-based Buffer Overflow

A buffer overflow in the gfmediaimport function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2025-60468

GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service local. The component is: filtercore/filterpid.c L:574-580: function gffilterpidinstswapdeletetask improperly accesses freed objects...

CVE-2025-60471

Removed by vendor...

CVE-2025-60474

A buffer overflow in the gfmediaimport function /mediatools/avparsers.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted input...

CVE-2025-60468

GPAC Multimedia Open Source Project GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master is affected by: Buffer Overflow. The impact is: cause a denial of service local. The component is: filtercore/filterpid.c L:574-580: function gffilterpidinstswapdeletetask improperly accesses freed objects...

CVE-2025-60466

A use-after-free in the gffilterpidgetpacket function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted media file...

CVE-2025-60473

A NULL pointer dereference in the gffilterinparentchain function /filtercore/filterpid.c of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service DoS via supplying a crafted file...