GPAC MP4Box CVE-2025-60465
MEDIUMSeverity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N
File-triggered DoS requires no authentication and no special privileges; AV:L for local file processing, UI:R for opening the crafted file, A:H for process crash with no confirmed confidentiality or integrity impact per the description.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
A use-after-free in the gf_filter_pid_inst_swap function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
AnalysisAI
Use-after-free in MP4Box's filter pipeline core (gf_filter_pid_inst_swap in filter_pid.c) allows local attackers to crash the application - and potentially achieve memory corruption beyond DoS - by supplying a crafted media file. Publicly available exploit code exists for this vulnerability, hosted on GitHub in a dedicated proof-of-concept repository. The EPSS score is low (0.17%, 6th percentile) with no CISA KEV listing, suggesting the public POC is research-grade rather than part of active exploitation campaigns, but the barrier to triggering a crash is low for any attacker with file delivery capability.
Technical ContextAI
GPAC is an open-source multimedia framework for MP4/ISOBMFF processing, and MP4Box is its primary command-line tool used extensively in media transcoding and research toolchains. The vulnerability is a CWE-416 (Use After Free) in the filter pipeline subsystem at src/filter_core/filter_pid.c within gf_filter_pid_inst_swap. The root cause is inadequate lifecycle management of GF_FilterPidInst objects during PID relinking: when reconfigure tasks are triggered before a relinking operation completes, a PID instance can be registered as a relink target for a destination while another operation concurrently holds a stale pointer to that same instance. The upstream fix (commit 55b351bd) adds a guard that returns early if src_pidinst already equals filter_dst->swap_pidinst_dst, preventing the double-processing path that frees the object prematurely. The NVD CPE entry (cpe:2.3:a:n/a:n/a:*:*:*:*:*:*:*:*) is a placeholder and provides no usable asset-inventory scoping; affected versions are determined from the GitHub issue and fix commit context.
RemediationAI
Upgrade GPAC/MP4Box to version 26.02.0 or later, which incorporates the guard introduced in commit 55b351bd078c950592544ab4c708a613c1725b9b (https://github.com/gpac/gpac/commit/55b351bd078c950592544ab4c708a613c1725b9b). The originating issue is tracked at https://github.com/gpac/gpac/issues/3283. Note that the '26.02.0' version boundary is stated in the CVE description and linked to the fix commit, but a tagged release at that exact version string has not been independently verified from a formal release page - confirm the specific release tag in the GPAC GitHub repository before deploying. For organizations that cannot patch immediately, restrict MP4Box usage to trusted, internally-generated media files and prevent untrusted or user-submitted files from being processed through automated pipelines. There is no documented configuration flag to disable the affected filter PID swap code path without disabling core media processing functionality, so isolation of the processing environment is the primary compensating control.
LibreNMS before 24.10.0 allows a remote attacker to execute arbitrary code via OS command injection involving AboutContr
Reachable assertion in Open5GS up to version 2.7.6 allows remote unauthenticated attackers to crash the Diameter CER han
A Command Injection issue in the payload build page in BYOB (Build Your Own Botnet) 2.0 allows attackers to execute arbi
Denial of service in Open5GS 2.7.6 and earlier allows network-adjacent attackers with low-privilege Diameter Gx peer acc
Denial of service in Open5GS HSS (Home Subscriber Server) versions 2.7.0 through 2.7.6 is triggered remotely by manipula
Remote command injection in Control Web Panel allows unauthenticated attackers to execute arbitrary OS commands as root
LINQPad before 5.52.01 Pro edition is vulnerable to Unsafe Deserialization in LINQPad.AutoRefManager::PopulateFromCache(
Remote code execution in dash-uploader (Python package for Plotly Dash) versions 0.1.0 through 0.7.0a2 allows unauthenti
Command injection in LiteLLM 1.18.10 lets attackers who can configure MCP (Model Context Protocol) servers supply arbitr
SQL injection in AzuraCast's backup restore flow (versions up to and including 0.23.7) lets an attacker achieve privileg
Arbitrary file read in Yu AI Code Mother v4.3 lets anonymous, remote attackers retrieve files outside the intended previ
Remote code execution in APScheduler (all versions through 3.10.x and 4.0.0a5) is achievable when applications deseriali
Same weakness CWE-416 – Use After Free
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today