Threat database

97 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	–	EPSS 0.2%	CVE-2025-60476gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60476 A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60469gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60469 A NULL pointer dereference in the gf_ac4_presentation_ch_mode function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-21
Medium	5.5	EPSS 0.3%	CVE-2025-60492gpac · n/a Medium5.5EPSS 0.3%2026-10-21CVE Database V5CVE-2025-60492 A stack overflow in the gf_bifs_dec_node function (/bifs/field_decode.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.3%Vulnerability CWE-121	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60490gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60490 A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.2%Vulnerability #ghsa-6r6c-hcg9-f738	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60487gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60487 A segmentation violation in the gf_isom_get_esd function (/isomedia/isom_read.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted XML file. EPSS 0.2%Vulnerability #ghsa-8w6v-2r34-39q3	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60478gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60478 A use-after-free in the gf_filter_packet_destroy function (/filter_core/filter_pck.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-21
Medium	5.5	EPSS 0.2%	CVE-2025-60497gpac · n/a Medium5.5EPSS 0.2%2026-10-21CVE Database V5CVE-2025-60497 A segmentation violation in the GetESD function (/isomedia/track.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.2%Vulnerability CWE-119 #ghsa-rw26-fwfw-w28v	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60493gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60493 A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.2%Vulnerability #ghsa-3qgg-fhm6-7g6f	CVE Database V5	2026-10-21
Medium	–	EPSS 0.3%	CVE-2025-60491gpac · n/a MediumEPSS 0.3%2026-10-21CVE Database V5CVE-2025-60491 A heap use-after-free in the dasher_flush_segment function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.3%Vulnerability #ghsa-m5fv-gfvq-j924	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60479gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60479 A NULL pointer dereference in the StatSFVec2f function (/scene_manager/scene_stats.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-4 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-71438gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-71438 An out-of-bounds read in gf_odf_ac4_cfg_dsi_v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60489gpac · n/a MediumEPSS 0.2%2026-10-21CVE Database V5CVE-2025-60489 A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-21
Medium	–	EPSS 0.2%	CVE-2025-60475gpac · n/a MediumEPSS 0.2%2026-10-20CVE Database V5CVE-2025-60475 A buffer overflow vulnerability exists in the gf_ac4_parser_bs function of GPAC Project/MP4Box before version 2.5. This flaw can be triggered by supplying crafted input, leading to a denial of service (DoS) condition. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-20
Medium	–	EPSS 0.2%	CVE-2025-60496gpac · n/a MediumEPSS 0.2%2026-10-20CVE Database V5CVE-2025-60496 A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file. EPSS 0.2%Vulnerability	CVE Database V5	2026-10-20
Medium	–	EPSS 0.2%	CVE-2025-60494gpac · n/a MediumEPSS 0.2%2026-10-20CVE Database V5CVE-2025-60494 A segmentation violation in the gf_props_equal_internal function (/filter_core/filter_props.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted data file. EPSS 0.2%Vulnerability #ghsa-w475-6vpr-c7qj	CVE Database V5	2026-10-20

Page 1 of 6 · 5 duplicate CVE records merged