CVE-2025-60490

NONE
—CVSS v3
—CVSS v2
0.17% EPSS (exploit probability)
—CWE

Description

A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references