Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-55639
6.5
MEDIUMCVSS v3
Published
June 23, 2026
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gf_isom_add_track_kind() function at isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
gpac/gpac
GitHubGPAC Ultramedia OSS for Video Streaming & Next-Gen Multimedia Transcoding, Packaging & Delivery
GitHubGPAC Ultramedia OSS for Video Streaming & Next-Gen Multimedia Transcoding, Packaging & Delivery< 26.02.0NVD
makesoftwaresafe/gpacGitHubModular Multimedia framework for packaging, streaming and playing your favorite content.
GitHubModular Multimedia framework for packaging, streaming and playing your favorite content.< 26.02.0NVD