NULL Pointer Dereference in GPAC MPEG-2 TS Demuxer
CVE-2025-71466

6.8MEDIUM

Key Information:

Vendor

Gpac

Status
Gpac
Vendor
CVE Published:
15 November 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2025-71466?

A NULL pointer dereference vulnerability exists in GPAC versions prior to 26.02.0, specifically in the m2tsdmx_update_sdt() function. This flaw can be exploited by attackers who provide a specially crafted .ts file containing an invalid service descriptor. When the service or provider names are left NULL, it can lead to the crashing of the MP4Box demuxer, which ultimately results in service disruption. Due to this vulnerability, unauthorized users could impact the availability of services relying on the GPAC media processing toolkit.

Affected Version(s)

gpac 0 < 26.02.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2025-71466 - Proof of Concept

References

https://github.com/gpac/gpac/issues/3267
issue-tracking
https://github.com/gpac/gpac/commit/62714f27c64a3d1eb7e88...
patch
https://github.com/gpac/gpac/blob/v2.4.0/src/filters/dmx_...
technical-description

CVSS V4

Score:
6.8
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
Unknown

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

Alexander A. Shvedov (sigdevel)
Aurelien David
.