A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
History

Fri, 23 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
References

Thu, 22 Oct 2026 01:30:00 +0000

Type Values Removed Values Added
Title NULL Pointer Dereference in GPAC MP4Box Leads to Denial of Service
Weaknesses CWE-690

Thu, 22 Oct 2026 00:00:00 +0000

Type Values Removed Values Added
First Time appeared Gpac
Gpac mp4box
Vendors & Products Gpac
Gpac mp4box

Wed, 21 Oct 2026 23:30:00 +0000

Type Values Removed Values Added
Title NULL Pointer Dereference in GPAC MP4Box Allows Denial of Service
Weaknesses CWE-476

Wed, 21 Oct 2026 20:45:00 +0000

Type Values Removed Values Added
Title NULL Pointer Dereference in GPAC MP4Box Allows Denial of Service
Weaknesses CWE-476

Wed, 21 Oct 2026 14:00:00 +0000

Type Values Removed Values Added
Description A NULL pointer dereference in the dasher_insert_timeline_entry function (/filters/dasher.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2026-10-21T00:00:00.000Z

Updated: 2026-10-23T15:07:27.683Z

Reserved: 2025-09-26T00:00:00.000Z

Link: CVE-2025-60489

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-10-21T14:17:07.333

Modified: 2026-10-23T15:17:21.570

Link: CVE-2025-60489

cve-icon Redhat

No data.