CVE-2025-55639

GPAC MP4Box v2.4 was discovered to contain a NULL pointer dereference in the gf_isom_add_track_kind() function at isomedia/isom_write.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.

• CWE-476

• https://github.com/gpac/gpac/commit/027ce139dda498ee95df36db9f9f6f3cadce8ec9Patch
• https://github.com/gpac/gpac/issues/3260Exploit, Issue Tracking
• https://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/23/23_poc.mp4Exploit
• https://infosec.exchange/@sigdevel/116769184815236865Exploit, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2026/06/26/2Exploit, Mailing List, Third Party Advisory
• https://github.com/gpac/gpac/issues/3260Exploit, Issue Tracking

Published

Jun 23, 2026

Last Modified

Jun 30, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-55629Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Vide…6.5
• CVE-2025-5563The WP-Addpub plugin for WordPress is vulnerable to SQL Inje…6.5
• CVE-2025-55630A discrepancy in the error message returned by the login fun…7.3
• CVE-2025-55631Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - …4
• CVE-2025-55634Incorrect access control in the RTMP server settings of Reol…7.5
• CVE-2025-55637Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - …9.8
• CVE-2025-5564The GC Social Wall plugin for WordPress is vulnerable to Sto…6.4
• CVE-2025-55641A NULL pointer dereference in the gf_isom_copy_sample_info f…5.5
• CVE-2025-55642GPAC MP4Box v2.4 was discovered to contain a floating point …6.5
• CVE-2025-55643A NULL pointer dereference in the TrackWriter handling compo…5.5
• CVE-2025-55644A heap use-after-free in the gf_node_get_tag function (scene…5.5
• CVE-2025-55645A heap buffer overflow in the gf_cenc_set_pssh function (iso…5.5