A NULL pointer dereference in the ctts_box_write function (isomedia/box_code_base.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
References
| Link | Resource |
|---|---|
| https://infosec.exchange/@sigdevel/116710743410087676 | Exploit Mitigation Third Party Advisory |
| http://www.openwall.com/lists/oss-security/2026/06/13/17 |
Configurations
History
14 Jun 2026, 00:16
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
12 Jun 2026, 16:51
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://infosec.exchange/@sigdevel/116710743410087676 - Exploit, Mitigation, Third Party Advisory | |
| CPE | cpe:2.3:a:gpac:gpac:2.4:*:*:*:*:*:*:* | |
| First Time |
Gpac
Gpac gpac |
09 Jun 2026, 21:17
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
09 Jun 2026, 20:16
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-476 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
09 Jun 2026, 19:17
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-06-09 19:17
Updated : 2026-06-14 00:16
NVD link : CVE-2025-55659
Mitre link : CVE-2025-55659
CVE.ORG link : CVE-2025-55659
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-476
NULL Pointer Dereference