VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Jun 15, 2026· Updated Jun 16, 2026

CVE-2025-55649

CVE-2025-55649

Description

A NULL pointer dereference in the gf_media_map_esd function (media_tools/isom_tools.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Gpac/Gpac
    cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*
    Range: <26.02.0
  • Gpac/MP4Boxllm-fuzzy
    Range: = 2.4

Patches

Vulnerability mechanics

References

2

News mentions

1