CYBERSECURITYTRACKER
Permanent story citation

CVE-2025-60467: GPAC/MP4Box: Use-After-Free in gf_filter_pid_inst_swap_delete_task on crafted MPEG-2 TS file

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11389

As cited

Copy frozen at (site build).

vulnerabilities

CVE-2025-60467: GPAC/MP4Box: Use-After-Free in gf_filter_pid_inst_swap_delete_task on crafted MPEG-2 TS file

A use-after-free vulnerability exists in GPAC's MP4Box when processing crafted MPEG-2 Transport Stream files. The flaw affects the gf_filter_pid_inst_swap_delete_task() function in the filter session core and can trigger a denial of service condition.

Why it matters: Organizations using GPAC or MP4Box to process or transcode media files should update to a patched version to prevent potential crashes or resource exhaustion from malicious files.

CVEsCVE-2025-60467
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary

Open in glossary