UNKNOWNCVSS not yet scoredVulnerability
CVE-2025-60476
A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-22T22:14:18.200859+00:00
- Epss score
- 0.00176
- Cve id
- CVE-2025-60476
- First seen by Signal
- 2026-10-21T22:34:38+00:00
- Retrieved at
- 2026-10-22T22:17:32+00:00
- Published at
- 2026-10-21T16:17:13.550
- Last modified
- 2026-10-22T21:17:13.677
- Epss percentile
- 0.06728
Explore deeper with Ninja Signal's threat intelligence graph