CVE-2025-71438 security flaw

Shvedov on Oct 22 Product: GPAC (MP4Box) Affected: gpac/gpac prior to fix commit (see References) CVE: CVE-2025-71438 CWE: CWE-125 (Out-of-bounds Read) CVSS 3.1: 5.4 MEDIUM (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L) Reporter: sigdevel Description: The gf_odf_ac4_cfg_dsi_v1 function in odf/descriptors.c uses a stream-supplied frame_rate_index to index into the fixed-size lookup tables...

Published 22-Oct-2026 21:16 UTC · First seen 22-Oct-2026 21:14 UTC

Sources

• Open Source Security · 22-Oct-2026