CVE-2025-60467

Name of the Vulnerable Software and Affected Versions GPAC Project/MP4Box versions prior to 26.02.0

Description A use-after-free issue exists in the gf filter pid inst swap delete task() function located in /filter core/filter pid.c. This flaw allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted media file. A use-after-free occurs when a program continues to use a pointer after it has been freed, which can lead to crashes or unpredictable behavior.

Recommendations Update to version 26.02.0 or later.