CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP4

CVE-2025-60492 security flaw

Shvedov on Oct 23 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1687-ge44a4e2b0-master Commit e44a4e2b0d193566619ada71599e70255699da94 Fixed: 8e7b9a3a04331286b89d1803c65a2d6edc11b4c4 CVE: CVE-2025-60492 CWE: CWE-674 (Uncontrolled Recursion) CVSS 3.1: 5.5 MEDIUM (AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H; CISA assessment) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box can exhaust its process stack while decoding a crafted...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources