PT-2026-120638 · Undefined · Undefined
CVE-2025-60476
·
Published
2026-10-21
·
Updated
2026-10-21
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
A heap use-after-free in the gf odf ac4 cfg clean list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Undefined