CVE-2025-60481

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0

Description A NULL pointer dereference exists in the gf odf ac4 cfg dsi v1() function within the /odf/descriptors.c file. This issue allows an attacker to cause a Denial of Service (DoS), which is a condition where a system or service becomes unavailable to its intended users, by providing a specially crafted AC4 file.

Recommendations Update to version 26.02.0 or later.