UNKNOWNCVSS not yet scoredVulnerability
CVE-2025-60490
A heap use-after-free in the gf_filter_pid_send_event_downstream function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
Properties
- Last source
- FIRST EPSS
- Nvd fetched at
- 2026-10-22T22:14:18.200859+00:00
- Epss score
- 0.00168
- Cve id
- CVE-2025-60490
- First seen by Signal
- 2026-10-21T22:34:38+00:00
- Retrieved at
- 2026-10-22T22:17:32+00:00
- Published at
- 2026-10-21T15:17:13.727
- Last modified
- 2026-10-22T17:16:02.510
- Epss percentile
- 0.05848
Explore deeper with Ninja Signal's threat intelligence graph