CVE-2025-15667

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 2.5-DEV

Description A double free occurs in the MP4Box component within the gf isom nalu sample rewrite() function located in the src/isomedia/avc ext.c file. This issue is triggered by the manipulation of the nalu out bs argument and can be exploited on a local host. A double free is a memory corruption issue that occurs when an application attempts to free the same memory location twice.

Recommendations Deploy patch f29f955f2a3b5e8e507caad3e52319f961bf37bf for versions prior to 2.5-DEV.