CVE-2025-60474 | GPAC up to 26.1.x MP4Box av_parsers.c gf_media_import buffer overflow (Issue 3287)

June 25, 2026 Yanac

A vulnerability has been found in GPAC up to 26.1.x and classified as critical. This affects the function gf_media_import of the file /media_tools/av_parsers.c of the component MP4Box. This manipulation causes buffer overflow.

The identification of this vulnerability is CVE-2025-60474. The attack needs to be done within the local network. Furthermore, there is an exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More