MP4Box Heap Buffer Overflow DoS

The vulnerability of the StatSFVec2f function in the MP4Box utility of the GPAC multimedia platform is related to the pointer swapping between the zero pointer and other pointers. Exploiting this vulnerability could allow an attacker to cause a service failure...

ROS-20251008-04

The dumpisomsaps function file applications/mp4box/filedump.c, line 1743 does not check the pointers to NULL before accessing track structure fields, which allows an attacker to generate an MP4 file with a corrupted track there is no mandatory Sample Description Box - stsd. MP4 file with corrupte...