CVE-2025-55658 identifies a floating point exception vulnerability in GPAC MP4Box v2.4 within the gf_opus_parse_packet_header function located in media_tools/av_parsers.c. This vulnerability allows an attacker to cause a denial of service by supplying a specially crafted MP4 file that triggers the exception. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. There is no vendor advisory or patch information available at this time.

Successful exploitation results in a denial of service condition, causing the affected application to crash or become unresponsive. There is no indication of confidentiality or integrity compromise. The vulnerability can be triggered remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted or suspicious MP4 files with GPAC MP4Box v2.4. Monitor official GPAC channels for updates or patches addressing this issue.