NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#gpac

5 stories this week · 23 this month · 23 in 6 months · mostly security

Stories per day · 30 days

Relatedmp4box23 null-dereference9 denial-of-service8 use-after-free7 ac-45 mp45 cwe-4164 mpeg-24 cwe-4763 bifs2 divide-by-zero2 heap-overflow2 media2 media-parsing2 buffer-overread1 cve-2025-556401 cve-2025-556531 dash1

6 stories, newest first · one card per story

oss-security1d ago

GPAC MP4Box AC-4 cleanup use-after-free disclosed as CVE-2025-60482

The confirmed build is 2.5-DEV-rev1593-gfe88c3545-master; CISA ADP scores it 5.5 for local availability impact only.

5 sources gpac mp4box

oss-security7d agohigh

GPAC MP4Box heap use-after-free via MPEG-2 TS (CVE-2025-60491)

The bug is in dasher_flush_segment() on 2.5-DEV-rev1698 and is fixed by commit f6128214.

7 sources gpac mp4box

2

oss-security8d agohigh

GPAC MP4Box AC-4 cleanup has heap use-after-free (CVE-2025-60476)

BDU scores it CVSS 8.8 with a network vector; the fix is commit e02d1fd24cdc.

6 sources gpac mp4box

1

oss-security10d ago

GPAC MP4Box heap overflow via crafted AC-4 file (CVE-2025-60480)

The medium-severity out-of-bounds heap read is fixed in commit e02d1fd and rated CVSS 6.5.

3 sources gpac mp4box

1

oss-security13d ago

CVE-2025-55653: Divide by Zero in GPAC/MP4Box via gf_parse_lfrac on crafted MP4 with zero-denominator fraction

GPAC MP4Box divide-by-zero CVE-2025-55653 crashes the importer on crafted MP4 files with a zero-denominator fraction.

2

oss-security13d ago

CVE-2025-55640: Heap Buffer Overflow in GPAC/MP4Box via stbl_AddSize on crafted MP4 with corrupted sample metadata

CVE-2025-55640 is a heap overflow in GPAC MP4Box triggered by crafted MP4 sample metadata.

2