CVE-2025-55657

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4

Description A NULL pointer dereference occurs in the gf odf vvc cfg write bs() function within the odf/descriptors.c file. This issue allows attackers to cause a Denial of Service (DoS), which is a condition where a system or service becomes unavailable to its intended users, by providing a specially crafted MP4 file.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.