A heap buffer overflow in the gf_cenc_set_pssh function (isomedia/drm_sample.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://infosec.exchange/@sigdevel/116736802253007654 Exploit, Mitigation, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · gpacNVD modified 2026-10-13 10:10
Affected (CPE criteria) 1
cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*
References 2
- https://infosec.exchange/@sigdevel/116736802253007654 Exploit, Mitigation, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2026/06/13/6 Exploit, Mailing List, Third Party Advisory