A heap buffer overflow in the Opus audio stream parser component of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://infosec.exchange/@sigdevel/116733907390103029 Exploit, Mitigation, Patch, Third Party Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 5.5 · gpacNVD modified 2026-10-12 22:10
Affected (CPE criteria) 1
cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*
References 2
- https://infosec.exchange/@sigdevel/116733907390103029 Exploit, Mitigation, Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2026/06/13/13 Exploit, Mailing List, Third Party Advisory