CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP5

CVE-2025-60493 security flaw

Shvedov on Oct 24 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1699-g31becc9e0-master Commit 31becc9e08b88e525a4a62013a4000de1c0f8fd9 Fixed: 9afeea23f5c6584c02aefe1e1560c2844dfb8f7e CVE: CVE-2025-60493 CWE: CWE-476 (NULL Pointer Dereference) CVSS 3.1: 4.3 MEDIUM (AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L; third-party assessment) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box dereferences a near-NULL pointer in...

Published 25-Oct-2026 00:01 UTC · First seen 25-Oct-2026 00:00 UTC

Sources