EUVD-2025-211141
GHSA-6vm9-xcwf-xg6x
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessDeliver crafted AC4 media file
-
ExploitVictim runs MP4Box/GPAC on file
-
ExecutionOut-of-bounds access in gf_ac4_parser_bs
-
ImpactProcess crash / Denial of Service
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V15 - Secure Coding and Architecture Bounds checking, buffer size validation
MITRE ATT&CK
2 techniques across 2 tactics: Execution, Privilege Escalation The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires the victim to locally process an attacker-supplied, crafted file containing malformed AC4 data using MP4Box or another GPAC-based application that invokes gf_ac4_parser_bs (/media_tools/av_parsers.c) in a version before 2.5; the CVSS UI:R and AV:L metrics confirm it is not remotely triggerable without the user opening/processing the file. No authentication is needed (PR:N), but the local vector plus required user interaction are the key limiting factors. Impact is confined to availability (A:H; C:N/I:N) - a crash/DoS, with no data disclosure or code execution established by the sources. Upgrading to GPAC/MP4Box 2.5 (the commit that adds the bounds and NULL checks) is the fix per the vendor evidence. |
| Impact | This is a moderate, availability-only issue rather than a top-tier emergency. The supplied CVSS:3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) describes a local, low-complexity bug that requires user interaction and produces only a Denial of Service (A:H, with C:N/I:N) - there is no confidentiality or integrity impact and no network reachability. All exploitation signals point the same direction and do not conflict: EPSS is low (0.23%, 13th percentile), the CVE is not listed in CISA KEV, and the PoC is a reference only, not verified as working exploit code. The vuln.today decision label is 'this_month', consistent with a real but non-urgent defect. The one caveat is mechanism-versus-metric: the description and CWE-119 label this a 'buffer overflow', but the fixing commit (bounds checks on stream->fs_index and frame_rate_index against table lengths, plus NULL checks and double-free cleanup in the AC4 parser) indicates out-of-bounds reads/invalid memory handling that manifest as a crash; the available evidence supports DoS only and does not establish that this is corruptible into code execution. Net: a legitimate parser-hardening fix to schedule in normal patch cycles, not a drop-everything priority. |
| Exploit ScenarioDerived | An attacker crafts a malformed AC4-containing media file and gets a victim to process it with MP4Box or another GPAC-based tool (for example as part of a transcoding or ingest pipeline). When gf_ac4_parser_bs parses the crafted AC4 structures, out-of-bounds access crashes the process, denying service. A public PoC reference exists but is not verified as working exploit code. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 28, 2026
A crafted AC-4 audio bitstream can crash GPAC's media tools and libraries before release 2.5, giving a local attacker a denial-of-service condition against MP4Box or any GPAC-based application that parses untrusted media. The flaw is an out-of-bounds / memory-safety defect (CWE-119) in gf_ac4_parser_bs() in media_tools/av_parsers.c, where sampling-frequency, frame-rate and substream-group indexes are used without sufficient validation; impact per the assessed CVSS:3.1 vector (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) is availability-only, with no disclosure or code execution established. It is not listed in CISA KEV, EPSS is low at roughly 0.23% (13th percentile), and a public PoC reference exists but is not verified as working exploit code; no authentication is required, but the attack is local and needs the victim to open or process the malicious file.
RemediationAI
Upgrade to GPAC/MP4Box 2.5, which incorporates commit e02d1fd24cdc26acb1b236ab38b3832cffcae21b and its bounds checks on fs_index and frame_rate_index, the clamped n_add_emdf_substreams loop, the NULL guards on substream groups, and the corrected temp_groups cleanup; rebuilding against that commit is the vendor-supported fix, and no patched release level other than 2.5 is indicated by the available data. Because the assessed vector is local with required user interaction (AV:L/UI:R) and the impact is availability-only, interim risk reduction centers on not passing untrusted AC-4-bearing files to MP4Box or GPAC-linked applications: process media from external sources in a sandbox, container or throwaway environment so a crash cannot affect production tooling, and defer or queue batch/automated GPAC transcoding of untrusted inputs until the 2.5 build is deployed. Track the upstream issue https://github.com/gpac/gpac/issues/3291 and the NVD entry https://nvd.nist.gov/vuln/detail/CVE-2025-60475 for any further guidance; the sources do not describe a configuration switch that disables AC-4 parsing as a workaround.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
GPAC is a multimedia framework whose MP4Box tool and underlying library parse container formats and their embedded audio/video streams; AC-4 is Dolby's audio codec, and GPAC implements an AC-4 configuration parser in src/media_tools/av_parsers.c plus descriptor serialization in src/odf/descriptors.c. This is a CWE-119 improper-restriction-of-operations-within-memory-buffer class defect: the parser indexes fixed lookup tables (AC4_SAMPLING_FREQ_TABLE, AC4_SAMPLE_DELTA_TABLE_441/48, AC4_MEDIA_TIMESCALE_441/48) using bitstream-derived values such as fs_index and frame_rate_index without checking them against the array lengths, and iterates n_add_emdf_substreams while writing into the fixed-size substream_emdf_version and substream_key_id arrays. The upstream fix commit e02d1fd24cdc26acb1b236ab38b3832cffcae21b adds bounds comparisons for the sampling-frequency and frame-rate indexes (returning GF_FALSE after seeking back on failure), clamps the substream loop to the minimum of the two array lengths, adds NULL guards for stream groups and substreams across presentation helpers, validates name_len and n_targets in gf_odf_ac4_cfg_alternative_info, and reworks temporary substream-group cleanup in gf_ac4_raw_frame to remove copied groups from the temp list before freeing, avoiding double frees. These are memory-safety defects reachable during AC-4 parsing of an attacker-supplied file; the exact triggering bitstream conditions for each individual check are not described beyond the diff itself.
Know when the next one hits your stack
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Local file-parsing bug (AV:L) needing a victim to process a crafted file (UI:R), no auth (PR:N), causing only a crash (A:H, C:N/I:N).
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
3DescriptionCVE.org
A buffer overflow in the gf_ac4_parser_bs function (/media_tools/av_parsers.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted input.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
A buffer overflow occurs when a program writes more data to a memory buffer than it was allocated to hold, causing the excess data to spill into adjacent memory regions.
Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.
Exploit-DB