CVE-2025-55651

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4

Description A NULL pointer dereference occurs in the gf isom get user data count() function within the isomedia/isom read.c file. This issue allows attackers to cause a Denial of Service (DoS), which is a condition where a system or service becomes unavailable to its intended users, by providing a specially crafted MP4 file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.