GPAC MP4Box AC-4 parser over-reads a buffer (CVE-2025-60475)
gf_ac4_parser_bs indexes a rate table with a frame_rate_index taken from a crafted AC-4 stream.
Stories per day · 30 days
Relatedgpac5mp4box5buffer-overread1cwe-4161cwe-4761denial-of-service1heap-overflow1media-parser1null-dereference1out-of-bounds-read1use-after-free1
3 stories, newest first · one card per story
Stories tagged #ac-4
GPAC MP4Box AC-4 cleanup has heap use-after-free (CVE-2025-60476)
BDU scores it CVSS 8.8 with a network vector; the fix is commit e02d1fd24cdc.
GPAC MP4Box heap overflow via crafted AC-4 file (CVE-2025-60480)
The medium-severity out-of-bounds heap read is fixed in commit e02d1fd and rated CVSS 6.5.