CVE-2025-60479 | GPAC MP4Box 0.8.0/2.1-DEV-/2.4 scene_stats.c StatSFVec2f null pointer dereference

October 21, 2026 Yanac

A vulnerability categorized as problematic has been discovered in GPAC MP4Box 0.8.0/2.1-DEV-/2.4. This issue affects the function StatSFVec2f of the file /scene_manager/scene_stats.c. The manipulation results in null pointer dereference.

This vulnerability is cataloged as CVE-2025-60479. The attack must be initiated from a local position. There is no exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More