GPAC MP4Box use-after-free on crafted MPEG-2 TS (CVE-2025-60467)
The flaw is in a scheduled delete task in GPAC’s filter session core, triggered by a crafted MPEG-2 TS file.
3 stories, newest first · one card per story
The flaw is in a scheduled delete task in GPAC’s filter session core, triggered by a crafted MPEG-2 TS file.
The bug is in dasher_flush_segment() on 2.5-DEV-rev1698 and is fixed by commit f6128214.
The bug is in 2.5-DEV-rev1617 and scores CVSS 7.8 with local access and user interaction.
Today 1K readers · 1.5K views · 1.1K reads · all time 159K views