CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP5

CVE-2025-60494 security flaw

Shvedov on Oct 23 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1699-g31becc9e0-master Commit 31becc9e08b88e525a4a62013a4000de1c0f8fd9 Fixed: fcb9083292befe61d3e2466b18edfedba49da098 CVE: CVE-2025-60494 CWE: CWE-476 (NULL Pointer Dereference) CVSS 3.1: 5.5 MEDIUM (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box performs an invalid read in gf_props_equal_internal() at...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources