A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.
Project Subscriptions
No data.
Advisories
No advisories yet.
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Thu, 25 Jun 2026 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Use-After‑Free Leading to Denial of Service in GPAC MP4Box | |
| Weaknesses | CWE-416 |
Wed, 24 Jun 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file. | |
| References |
|
|
Projects
Sign in to view the affected projects.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-06-24T22:56:28.912Z
Reserved: 2025-09-26T00:00:00.000Z
Link: CVE-2025-60467
No data.
No data.
No data.
OpenCVE Enrichment
Updated: 2026-06-25T02:00:05Z
Weaknesses