PT-2026-55929

CVE-2025-15667

Published

2025-11-27

Updated

2026-10-12

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 2.5-DEV

Description A double free occurs in the MP4Box component within the gf isom nalu sample rewrite() function located in the src/isomedia/avc ext.c file. This issue is triggered by the manipulation of the nalu out bs argument and can be exploited on a local host. A double free is a memory corruption issue that occurs when an application attempts to free the same memory location twice.

Recommendations Deploy patch f29f955f2a3b5e8e507caad3e52319f961bf37bf for versions prior to 2.5-DEV.

Exploitability

Exploit

Fix

Impacts

Researchers

Noki

Vendors

Affected products

Weakness enumeration

CWE-415: Double Free

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer