Heap Use-After-Free Vulnerability in GPAC Project's MP4Box

CVE-2025-60486

What is CVE-2025-60486?

The GPAC Project's MP4Box is susceptible to a heap use-after-free vulnerability in the dasher_process function, specifically identified in the dasher.c file. This flaw allows an attacker to craft a specially designed MPEG-2 file, leading to potential Denial of Service (DoS) by exploiting this weakness. Without proper memory management, the application can become unstable, highlighting the critical importance of secure coding practices and timely updates to protect against such attacks.

References