What is the CVSS score of CVE-2025-55645?

CVE-2025-55645 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

GPAC MP4Box CVE-2025-55645

EUVD-2025-210145 MEDIUM

Heap-based Buffer Overflow (CWE-122)

2026-06-15 mitre

GHSA-w2wh-pf27-jmh6

Buffer Overflow Denial Of Service Heap Overflow N A

5.5

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

vuln.today AI

5.5 MEDIUM

Local file-parsing flaw requiring victim interaction; no elevated privileges needed to run MP4Box; DoS-only impact with no confidentiality or integrity breach confirmed.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jun 15, 2026 - 23:20 vuln.today

CVSS changed

Jun 15, 2026 - 21:22 NVD

5.5 (None) 5.5 (MEDIUM)

CVE Published

Jun 15, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

AnalysisAI

Heap buffer overflow in GPAC MP4Box v2.4 crashes the application when processing a maliciously crafted MP4 file, triggering a DoS condition in the CENC DRM sample handler. The vulnerable code path resides in gf_cenc_set_pssh (isomedia/drm_sample.c), which processes Protection System Specific Header data embedded in MP4 containers. SSVC confirms no active exploitation, no public exploit exists, and the CVSS local-vector/user-interaction requirement significantly constrains real-world attack surface.

Technical ContextAI

GPAC is a widely used open-source multimedia framework; MP4Box is its command-line tool for MP4 muxing, demuxing, and inspection. The vulnerable function gf_cenc_set_pssh resides in isomedia/drm_sample.c, responsible for handling CENC (Common Encryption) PSSH (Protection System Specific Header) boxes used in DRM-protected MP4 streams. CWE-122 (Heap-based Buffer Overflow) identifies the root cause as a write operation that exceeds the bounds of a heap-allocated buffer, likely due to insufficient size validation of attacker-controlled PSSH box content before copying into the buffer. The CVSS vector AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H reflects that exploitation occurs locally when a user opens the crafted file, with impact confined to process availability. The CPE data provided (cpe:2.3:a:n/a:n/a) is non-specific and not useful for product scoping beyond what the description states.

RemediationAI

No vendor-released patched version has been independently confirmed from the available data - references point only to an oss-security mailing list post (http://www.openwall.com/lists/oss-security/2026/06/13/6) and a social media disclosure, neither of which confirms a fixed release. Monitor the GPAC project's official release channels and GitHub repository for a patched build. As compensating controls: avoid processing untrusted or externally supplied MP4 files with GPAC MP4Box v2.4 until a patch is confirmed; if automated MP4 processing pipelines use MP4Box, sandbox execution using OS-level isolation such as seccomp profiles, namespaces, or unprivileged containers to limit the DoS blast radius to the sandboxed process rather than the broader system. Restricting which file sources can feed into MP4Box pipelines (allowlisting trusted origins) reduces exposure without requiring operational downtime.