GPAC MP4Box CVE-2025-60492

Requires the victim to open or process an attacker-crafted MP4 file containing a BIFS (Binary Format for Scenes) stream with node nesting deeper than ~1500 levels using GPAC/MP4Box before version 2.5; the recursive gf_bifs_dec_node decoder has no depth bound in vulnerable builds. Limiting factors: the vector is local (AV:L) and requires user interaction (UI:R) - the file must actually be parsed by MP4Box, so there is no remote network trigger; impact is confined to a crash (A:H only, C:N/I:N) with no code execution or data exposure; and the file must specifically reach the BIFS decode path. No non-default configuration is needed beyond processing a file that contains BIFS content.

This is a moderate, low-priority availability issue, not an urgent one. The provided CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H vector (base 5.5) describes a local, low-complexity flaw with no confidentiality or integrity impact and only high availability impact (a crash), requiring user interaction to trigger. The AV:L plus UI:R combination is consistent with the description: exploitation requires a victim to run MP4Box against an attacker-supplied crafted file, so this is not a remotely-triggerable service compromise. A public POC exists (publicly available exploit code exists), which raises practical reproducibility, but there is no CISA KEV listing and no EPSS score was provided, so there is no evidence of active or widespread exploitation - the POC signal and the absence of KEV should not be conflated. The upstream commit (8e7b9a3) confirms the root cause as unbounded recursion in gf_bifs_dec_node, fixed by capping BIFS tree depth at 1500, which corroborates a stack-exhaustion DoS rather than code execution. No SSVC decision data, EPSS probability, or CWE was supplied in the input, so automatability and exploitation-status framing cannot be fully evaluated. Net: a real but self-contained DoS in a file-parsing tool, appropriately mid-severity.

An attacker crafts an MP4 file containing a BIFS scene with excessively deep node nesting and delivers it to a victim or an automated media pipeline. When the victim parses the file with MP4Box/GPAC (before 2.5), gf_bifs_dec_node recurses without a depth limit, exhausting the stack and crashing the process. A public proof-of-concept for this crash is available (publicly available exploit code exists), and because the CVSS vector is AV:L with UI:R, the attack depends on the victim locally processing the malicious file rather than any remote network trigger.