CVE-2025-70303
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Jan 15, 2026
CISA due date
—
The record
A heap overflow in the uncv_parse_config() function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|