Buffer Overflow Vulnerability in GPAC Software by GPAC
CVE-2025-25723

8.4HIGH

Key Information:

Vendor

GPAC

Status
GPAC
Vendor
CVE Published:
28 February 2025

What is CVE-2025-25723?

A buffer overflow vulnerability has been identified in GPAC version 2.5, which could be exploited by a local attacker to execute arbitrary code. If successfully exploited, this vulnerability could compromise the integrity of the affected system, leading to unauthorized access and control. Users of GPAC are advised to update to the latest version as a precautionary measure against potential attacks.

References

https://github.com/gpac/gpac/issues/3089
https://github.com/gpac/gpac/commit/74e26b8dfeb0ab8c73176...

CVSS V3.1

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.