Live › vulnerability › CVE-2025-55640
Go to dashboardGPAC MP4Box v2.4 has a heap buffer overflow in the stbl_AddSize function in isomedia/stbl_write.c. A crafted MP4 file can crash the tool, causing a denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run GPAC MP4Box v2.4 to process MP4 files, especially where files come from users or external sources. Systems that only handle trusted, locally produced media are less exposed. The sources do not say whether other GPAC components are affected.
No product ranges from the sources yet.
MP4Box -version and compare against the fixed release (unknown from sources)2.4 to a release that includes the fix (exact version unknown from sources)Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A heap buffer overflow in the stbl_AddSize function (isomedia/stbl_write.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
This page as .md · .json · in your agent: get_signal("CVE-2025-55640")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.