Segmentation Violation in GPAC MP4Box Affects Video Processing
CVE-2025-55667

5.5MEDIUM

Key Information:

Vendor

GPAC

Status
MP4Box
Vendor
CVE Published:
19 October 2026

What is CVE-2025-55667?

A segmentation violation vulnerability exists in the dump_isom_saps function within the GPAC MP4Box software (version 2.5-DEV-rev1672-gc9a31d0e1-master). This flaw allows attackers to craft a malicious MP4 file that, when processed, can lead to a Denial of Service (DoS) condition. Exploiting this vulnerability can disrupt service by causing the application to crash, thereby compromising the availability of video processing functionalities.

References

https://github.com/gpac/gpac/issues/3321
https://github.com/gpac/gpac/commit/e6d01820d7bf3967d931f...
https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Bo...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.