A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.
2026年10月22日
CVE-2025-60476 – A heap use-after-free in the gf_odf_ac4_cfg_clean_list function (/odf/descriptors.c) of GP
📑 文章目录



