Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-25 | 1 | Disclosure1 |
| 2026-06-26 | 1 | Patch1 |
🚨 HIGH Severity: CVE-2025-60467 (CVSS 7.5) Use-after-free in GPAC/MP4Box <26.02.0 enables DoS via crafted media files. Network exploitable, no auth required. Patch to v26.02.0+ immediately. #CVE #Vulnerability #PatchNow https://t.co/URiKnlcf1R
Post summary
CVE‑2025‑60467 is a use‑after‑free vulnerability in GPAC/MP4Box that allows remote DoS through crafted media files; updating to version 26.02.0 or later is required to remediate.
CVE-2025-60467 Use-After-Free in GPAC Project MP4Box Before 26.02.0 Causes Denial of Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-60467
Post summary
The post announces a use‑after‑free bug in GPAC Project MP4Box (prior to 26.02.0) that leads to a denial of service, without providing PoC, exploit code, or patch information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | gpac | gpac | - | - | - |