GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
References
| Link | Resource |
|---|---|
| https://infosec.exchange/@sigdevel/116710224797830572 | Exploit Mitigation Third Party Advisory |
Configurations
History
12 Jun 2026, 16:46
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://infosec.exchange/@sigdevel/116710224797830572 - Exploit, Mitigation, Third Party Advisory | |
| CPE | cpe:2.3:a:gpac:gpac:2.4:*:*:*:*:*:*:* | |
| First Time |
Gpac
Gpac gpac |
09 Jun 2026, 22:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| CWE | CWE-1077 |
09 Jun 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| CWE | CWE-400 |
09 Jun 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-09 19:17
Updated : 2026-06-12 16:46
NVD link : CVE-2025-55658
Mitre link : CVE-2025-55658
CVE.ORG link : CVE-2025-55658
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-1077
Floating Point Comparison with Incorrect Operator