CVE-2025-60492 | GPAC MP4Box up to 2.4 /bifs/field_decode.c gf_bifs_dec_node stack-based overflow

October 21, 2026 Yanac

A vulnerability classified as problematic has been found in GPAC MP4Box up to 2.4. Affected by this issue is the function gf_bifs_dec_node of the file /bifs/field_decode.c. This manipulation causes stack-based buffer overflow.

This vulnerability appears as CVE-2025-60492. The attack may be initiated remotely. There is no available exploit.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More