NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#bifs

0 stories this week · 2 this month · 2 in 6 months · mostly security

Stories per day · 30 days

Relateddenial-of-service2 gpac2 mp4box2 null-dereference1 uncontrolled-recursion1

2 stories, newest first · one card per story

oss-security7d ago

GPAC MP4Box stack exhaustion in BIFS decoder (CVE-2025-60492)

Crafted MP4 input can recurse until the process stack is exhausted; CVSS is 5.5 medium.

7 sources gpac mp4box

1

oss-security8d ago

GPAC MP4Box NULL dereference via crafted BIFS (CVE-2025-60479)

A crafted BIFS scene can crash StatSFVec2f locally; CVSS 3.1 is 5.5 and a fix commit is named.

6 sources gpac mp4box

1