Live › vulnerability › CVE-2025-60493
Go to dashboardA segmentation violation in the check_media_profile function of GPAC MP4Box before 2.5 can be triggered by a crafted MP4 file. An attacker who gets such a file processed can crash the tool, causing denial of service.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Teams that run GPAC MP4Box on MP4 files they did not create, such as media upload or transcoding services. Installations that only process trusted local files are at much lower risk. unknown whether other GPAC components are affected.
No product ranges from the sources yet.
MP4Box -version and compare against the fixed release.2.5 or later.Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A segmentation violation in the check_media_profile function (/mp4box/mp4box.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
This page as .md · .json · in your agent: get_signal("CVE-2025-60493")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.