GPAC MP4Box NULL dereference on crafted MP4 metadata (CVE-2025-60477)
Original title: CVE-2025-60477: GPAC/MP4Box: NULL Pointer Dereference in gf_filter_pid_resolve_file_template_ex on crafted MP4 with special metadata
The crash is in gf_filter_pid_resolve_file_template_ex while resolving DASH output file-name templates.
Alexander A. Shvedov reported CVE-2025-60477 in GPAC’s MP4Box. gf_filter_pid_resolve_file_template_ex in filter_core/filter_pid.c dereferences a NULL pointer when resolving output file-name templates during DASH processing of a crafted MP4 with special metadata. The snippet does not give affected versions, a fix, or exploitation status.
Unconfirmed: The snippet does not say whether the flaw is only a crash or whether a fix exists.
- Posted to oss-security on October 25.
- The function is in filter_core/filter_pid.c.
- Trigger is a crafted MP4 with special metadata.
- No fixed release is named.
Impact: NULL pointer dereference while processing a crafted MP4
| Product | Affected |
|---|---|
| GPAC MP4Box | — |
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-60477 | A NULL pointer dereference in the gf_filter_pid_resolve_file_template_ex function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows… | 5.0 | <1% |
From the original article
Posted by Alexander A. Shvedov on Oct 25 Product: GPAC (MP4Box) https://infosec. exchange/@sigdevel> Description: The gf_filter_pid_resolve_file_template_ex function in filter_core/filter_pid.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.