Cloudanix VulnDB

CVE-2025-55658

Medium · 6.5

CVSS

6.5

EPSS

0.3%

Published

Jun 9, 2026

CISA due date

—

The record

GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

Affected packages

Ecosystem Package Introduced Fixed

Related vulnerabilities