CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP4

CVE-2025-60497 security flaw

Shvedov on Oct 23 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1780-g50b5741f2-master Commit 50b5741f291126b610c59db433fc02e8a17f0c5d Fixed: 91083fcfce01aa596a13a6962768d13a60bfc8bb CVE: CVE-2025-60497 CWE: CWE-476 (NULL Pointer Dereference) CVSS 3.1: 5.5 MEDIUM (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H; CISA assessment) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box dereferences a NULL pointer in GetESD() at...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources