A NULL pointer dereference in the gf_isom_copy_sample_info function (isomedia/isom_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
References
| Link | Resource |
|---|---|
| https://infosec.exchange/@sigdevel/116736775314270129 | Exploit Mitigation Patch Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2026/06/13/9 | Exploit Mailing List Third Party Advisory |
Configurations
History
17 Jun 2026, 09:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://infosec.exchange/@sigdevel/116736775314270129 - Exploit, Mitigation, Patch, Third Party Advisory |
16 Jun 2026, 17:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:* | |
| References | () https://infosec.exchange/@sigdevel/116736775314270129 - Exploit, Mitigation, Third Party Advisory, Patch | |
| References | () http://www.openwall.com/lists/oss-security/2026/06/13/9 - Exploit, Mailing List, Third Party Advisory | |
| First Time |
Gpac
Gpac gpac |
15 Jun 2026, 21:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
| CWE | CWE-476 | |
| References |
|
15 Jun 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-15 20:16
Updated : 2026-06-17 09:41
NVD link : CVE-2025-55641
Mitre link : CVE-2025-55641
CVE.ORG link : CVE-2025-55641
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-476
NULL Pointer Dereference