CVE-2025-60477 security flaw

Shvedov on Oct 25 Product: GPAC (MP4Box) Affected: gpac/gpac prior to fix commit (see References) CVE: CVE-2025-60477 CWE: CWE-476 (NULL Pointer Dereference) CVSS 3.1: 4.3 MEDIUM (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) Reporter: sigdevel Description: The gf_filter_pid_resolve_file_template_ex function in filter_core/filter_pid.c is responsible for resolving output file name templates during DASH...

Published 26-Oct-2026 01:00 UTC · First seen 26-Oct-2026 00:58 UTC

Sources

• Open Source Security · 26-Oct-2026