CVE-2025-60487 | GPAC MP4Box up to 2.4 /isomedia/isom_read.c gf_isom_get_esd memory corruption

October 21, 2026 Yanac

A vulnerability marked as problematic has been reported in GPAC MP4Box up to 2.4. Affected is the function gf_isom_get_esd of the file /isomedia/isom_read.c. The manipulation leads to memory corruption.

This vulnerability is documented as CVE-2025-60487. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More