This vulnerability involves a stack buffer overflow in the filein_process function (in_file.c) of GPAC MP4Box version 2.4. An attacker can exploit this by providing a crafted MP4 file, leading to a denial of service condition. The CVSS 3.1 base score is 7.5, reflecting a network attack vector with low attack complexity, no privileges or user interaction required, and an impact limited to availability (denial of service). No integrity or confidentiality impacts are reported. The vulnerability is classified under CWE-121 (Stack-based Buffer Overflow). There is no vendor advisory or patch information available, and no known exploits in the wild have been reported.

Successful exploitation results in denial of service by crashing or destabilizing the application processing the crafted MP4 file. There is no reported impact on confidentiality or integrity. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted MP4 files with GPAC MP4Box v2.4 or implement application-level protections such as sandboxing or resource limits to mitigate potential denial of service.