CVE-2025-52293

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4

Description A segmentation violation occurs in the gf hevc read sps bs internal() function within the media tools/av parsers.c file. This issue allows attackers to cause a Denial of Service (DoS) by providing specially crafted HEVC SPS (Sequence Parameter Set) data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.