CVE-2025-55667

Published: Oct 19, 2026Modified: Oct 20, 2026Deferred

5.5

Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 1.8 / Impact: 3.6

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0 (Secondary)

Description

A segmentation violation in the dump_isom_saps function (/mp4box/filedump.c) of GPAC MP4Box v2.5-DEV-rev1672-gc9a31d0e1-masterallows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (7)

https://github.com/gpac/gpac/commit/e6d01820d7bf3967d931fedb379ee5f209bc133b

Source: cve@mitre.org

https://github.com/gpac/gpac/issues/3321

Source: cve@mitre.org

https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/57/57_dump_isom_saps_filedump_c_1743

Source: cve@mitre.org

https://infosec.exchange/@sigdevel/117456648463009125

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2026/10/20/8

Source: af854a3a-2127-422b-91ae-364da2661108

https://github.com/gpac/gpac/issues/3321

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/57/57_dump_isom_saps_filedump_c_1743

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.