GPAC MP4Box heap use-after-free via MPEG-2 TS (CVE-2025-60491)
The bug is in dasher_flush_segment() on 2.5-DEV-rev1698 and is fixed by commit f6128214.
2 stories, newest first · one card per story
The bug is in dasher_flush_segment() on 2.5-DEV-rev1698 and is fixed by commit f6128214.
BDU scores it CVSS 8.8 with a network vector; the fix is commit e02d1fd24cdc.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views