PT-2026-55929 · Undefined · Undefined

Noki · Publicado 2026-07-06 · Atualizado 2026-07-06 · CVE-2025-15667

NVD

CVSS v2.0

1.7

Baixa

Vetor base

AV:L/AC:L/Au:S/C:N/I:N/A:P

A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function gf isom nalu sample rewrite of the file src/isomedia/avc ext.c of the component MP4Box. This manipulation of the argument nalu out bs causes double free. It is possible to launch the attack on the local host. The exploit has been publicly disclosed and may be utilized. Patch name: f29f955f2a3b5e8e507caad3e52319f961bf37bf. To fix this issue, it is recommended to deploy a patch.

Exploit

Correção

Buffer Overflow

Double Free

Enumeração de Fraquezas

CWE-119

CWE-415

Identificadores relacionados

CVE-2025-15667

Produtos afetados

Undefined

Referências · 9

• 🔥 https://github.com/TimChan2001/pocs/raw/refs/heads/main/poc-gpac-1 · Exploit
• https://github.com/gpac/gpac/issues/3403 · Nota
• https://github.com/gpac/gpac/commit/f29f955f2a3b5e8e507caad3e52319f961bf37bf · Correção
• https://vuldb.com/vuln/376292 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-15667 · Nota de Segurança
• https://vuldb.com/cve/CVE-2025-15667 · Nota
• https://vuldb.com/submit/846839 · Nota
• https://vuldb.com/vuln/376292/cti · Nota
• https://github.com/gpac/gpac · Nota