PT-2026-120607 · Undefined · Undefined

CVE-2025-71438

·

Published

2026-10-21

·

Updated

2026-10-21

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
An out-of-bounds read in gf odf ac4 cfg dsi v1 (/odf/descriptors.c) in GPAC Project/MP4Box before v26.07.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

Exploit

Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2025-71438

Affected Products

Undefined