CVE-2025-60476

CVE-2025-60476CVE-2025-60476

Description

A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

Scoring

Last modified2026-10-22
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.