CVE-2025-60478 | GPAC MP4Box up to 2.4 filter_pck.c gf_filter_packet_destroy use after free

October 21, 2026 Yanac

A vulnerability labeled as problematic has been found in GPAC MP4Box up to 2.4. This impacts the function gf_filter_packet_destroy of the file /filter_core/filter_pck.c. Executing a manipulation can lead to use after free.

This vulnerability is registered as CVE-2025-60478. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More