CVE-2025-55658

MEDIUM

GPAC MP4Box 2.4 - Denial of Service via Crafted MP4 File

Title source: llm

Description

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

References (1)

Core 1

Core References

https://infosec.exchange/@sigdevel/116710224797830572

Scores

CVSS v3 6.5

EPSS 0.0030

EPSS Percentile 21.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1077

Status published

Products (1)

gpac/gpac 2.4

Published Jun 09, 2026

Tracked Since Jun 10, 2026