CVE-2025-70299
Medium · 6.5CVSS
6.5
EPSS
0.3%
Published
Jan 15, 2026
CISA due date
—
The record
A heap overflow in the avi_parse_input_file() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted AVI file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|