CVE-2025-60476
NONE—CVSS v3
—CVSS v2
0.18%
EPSS (exploit probability)
—CWE
Description
A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.
Affected routers (0)
No routers currently mapped to this CVE in our database.