CVE-2025-55644

Name of the Vulnerable Software and Affected Versions GPAC MP4Box version 2.4

Description A heap use-after-free occurs in the gf node get tag() function within the scenegraph/base scenegraph.c file. This issue allows a remote attacker to trigger a Denial of Service (DoS) by providing a specially crafted MP4 file. A heap use-after-free is a memory corruption flaw where an application continues to use a pointer after the memory it points to has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.