CVE-2025-70309
Medium · 5.5CVSS
5.5
EPSS
0.2%
Published
Jan 15, 2026
CISA due date
—
The record
A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|