NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#mp4

1 stories this week · 5 this month · 5 in 6 months · mostly security

Stories per day · 30 days

Relatedgpac5 mp4box5 null-dereference3 denial-of-service2 cve-2025-556401 cve-2025-556531 cwe-4761 dash1 divide-by-zero1 heap-overflow1 memory-corruption1 oss-security1

5 stories, newest first · one card per story

oss-security1d ago

GPAC MP4Box NULL dereference on crafted MP4 metadata (CVE-2025-60477)

The crash is in gf_filter_pid_resolve_file_template_ex while resolving DASH output file-name templates.

5 sources gpac mp4box

1

oss-security7d ago

GPAC MP4Box NULL dereference via crafted MP4 (CVE-2025-60489)

dasher_insert_timeline_entry() can crash on near-NULL; the fix commit is 4860a1a6.

7 sources gpac mp4box

2

oss-security10d ago

GPAC MP4Box NULL dereference in dump_isom_saps (CVE-2025-55667)

A local crash in build 2.5-DEV-rev1672 is fixed in commit e6d01820 and rated CVSS 5.5.

3 sources gpac mp4box

1

oss-security13d ago

CVE-2025-55653: Divide by Zero in GPAC/MP4Box via gf_parse_lfrac on crafted MP4 with zero-denominator fraction

GPAC MP4Box divide-by-zero CVE-2025-55653 crashes the importer on crafted MP4 files with a zero-denominator fraction.

2

oss-security13d ago

CVE-2025-55640: Heap Buffer Overflow in GPAC/MP4Box via stbl_AddSize on crafted MP4 with corrupted sample metadata

CVE-2025-55640 is a heap overflow in GPAC MP4Box triggered by crafted MP4 sample metadata.

2