CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP5

CVE-2025-60491 security flaw

Shvedov on Oct 23 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1698-gfc2009fa7-master Commit fc2009fa75631960743f8f7855dda8998167b5ab Fixed: f6128214feb69cd689e4b9944a2621bc4ad8faf0 CVE: CVE-2025-60491 CWE: CWE-416 (Use After Free) CVSS 3.1: 8.8 HIGH (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box contains a heap use-after-free in dasher_flush_segment() at...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources