What is the CVSS score of CVE-2025-60464?

CVE-2025-60464 has a CVSS 3.1 base score of 7.8 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of GPAC MP4Box are affected by CVE-2025-60464?

GPAC's MP4Box multimedia processing tool (versions before 26.02.0) can crash when processing specially crafted media files, disrupting video processing workflows.

Is there a public PoC exploit available for CVE-2025-60464?

Yes, a public proof-of-concept exploit is available for CVE-2025-60464. Prioritise patching immediately. EPSS: 0.2%.

How to fix or mitigate CVE-2025-60464?

Within 24 hours: Identify and audit all GPAC MP4Box deployments; assess exposure in workflows processing external or untrusted media. Within 7 days: Restrict processing to pre-validated, trusted source files only; disable SEI loader filter if not required; implement file format validation. Within 30 days: Monitor GPAC project for version 26.02.0 release; establish testing plan for patch deployment.

GPAC MP4Box CVE-2025-60464

HIGH

Use After Free (CWE-416)

2026-06-25 mitre

Memory Corruption Denial Of Service Use After Free N A

7.8

CVSS 3.1 · Vendor: mitre

Severity by source

Vendor (mitre) PRIMARY

7.8 HIGH

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

vuln.today AI

5.5 MEDIUM

Local parsing requiring the victim to open a crafted TS file gives AV:L/UI:R; documented impact is crash-only, so C:N/I:N/A:H rather than the input's high C/I.

3.1 AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from Vendor (mitre).

CVSS VectorVendor: mitre

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Source Code Evidence Fetched

Jun 26, 2026 - 14:23 vuln.today

Analysis Generated

Jun 26, 2026 - 14:23 vuln.today

CVSS changed

Jun 26, 2026 - 14:22 NVD

7.8 (HIGH)

CVE Published

Jun 25, 2026 - 00:00 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 TS file.

AnalysisAI

Denial of service in GPAC's MP4Box multimedia tool (versions before 26.02.0) arises from a use-after-free in the gf_sei_load_from_state_internal function of the SEI loader filter (src/filters/sei_load.c). Processing a maliciously crafted MPEG-2 Transport Stream file causes the parser to dereference a dangling pointer, crashing the application. Publicly available exploit code (a PoC test case and write-up) exists, though the issue is not listed in CISA KEV and carries a low EPSS exploitation probability (0.17%, 6th percentile).

Technical ContextAI

GPAC is a widely used open-source multimedia framework, and MP4Box is its command-line packaging/analysis utility. The flaw lives in the SEI (Supplemental Enhancement Information) loader filter, which manages per-codec parser state for AV1, VVC and other codecs. The root cause is CWE-416 (Use After Free): the commit diff (8f404bd) shows a copy-paste defect in seiloader_set_type() where, after freeing the AV1 state with gf_free(sei->av1_state), the code mistakenly nulled the unrelated pointer (sei->vvc_state = NULL) instead of sei->av1_state = NULL. This left sei->av1_state pointing at freed memory, so a subsequent codec-type switch triggered by a crafted MPEG-2 TS stream re-references the freed AV1 parser state. The official CPE string in the input is a placeholder (cpe:2.3:a:n/a:n/a:*), so exact affected-product enumeration relies on the description rather than NVD CPE data.

RemediationAI

Upgrade to GPAC/MP4Box version 26.02.0 or later, which contains the corrected pointer-reset logic; the upstream fix is commit 8f404bd581e455267482f86272169a742f654b97 (referenced via issue https://github.com/gpac/gpac/issues/3278). Treat this as an upstream fix available via commit, with the 26.02.0 release line as the documented fixed version per the description. Where immediate upgrade is not possible, the practical compensating control is to avoid running MP4Box/libgpac against untrusted or attacker-supplied MPEG-2 TS files - process only files from trusted sources, and if MP4Box is used in an automated ingestion or transcoding pipeline, sandbox the process (e.g., run under a restricted user, seccomp, or a container with no sensitive mounts) so a crash cannot affect other workloads. The trade-off of restricting input is reduced automation/throughput for untrusted media; sandboxing adds operational overhead but contains the impact to a single process restart.