CVE-2025-71438 | GPAC MP4Box up to 26.06.x /odf/descriptors.c gf_odf_ac4_cfg_dsi_v1 out-of-bounds

A vulnerability was found in GPAC MP4Box up to 26.06.x. It has been declared as problematic. This affects the function gf_odf_ac4_cfg_dsi_v1 of the file /odf/descriptors.c. Executing a manipulation can lead to out-of-bounds read.

This vulnerability is tracked as CVE-2025-71438. The attack can be launched remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More