CYBER CODE RED

Get real-time updates on Telegram

VULNERABILITYOpen Source SecurityP5

CVE-2025-60490 security flaw

Shvedov on Oct 23 Product: GPAC (MP4Box) Affected: 2.5-DEV-rev1665-g3f20eb0cd-master Commit 3f20eb0cd22116367c036e6ffe6ace299b38d686 Fixed: d0793f92e04fe284a25c2a9335cc5edc68deb6d4 CVE: CVE-2025-60490 CWE: CWE-416 (Use After Free) CVSS 3.1: 8.8 HIGH (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H; BDU assessment) Reporter: Alexander A. Shvedov (@sigdevel) Description: MP4Box contains a heap use-after-free in...

Published 23-Oct-2026 17:33 UTC · First seen 23-Oct-2026 17:32 UTC

Sources