GPAC MP4Box divide-by-zero on truncated MP4 (CVE-2025-60496)
A local user opening a crafted file can crash MP4Box; CVSS 3.1 is 5.5 and a fix commit is named.
2 stories, newest first · one card per story
A local user opening a crafted file can crash MP4Box; CVSS 3.1 is 5.5 and a fix commit is named.
GPAC MP4Box divide-by-zero CVE-2025-55653 crashes the importer on crafted MP4 files with a zero-denominator fraction.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views