CVE-2025-55647

An Out-of-Memory in the mp4_mux_cenc_insert_pssh function (filters/mux_isom.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.

• CWE-190

• https://infosec.exchange/@sigdevel/116736795058798433Exploit, Mitigation, Patch, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2026/06/13/7Exploit, Mailing List, Third Party Advisory

Published

Jun 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-5564The GC Social Wall plugin for WordPress is vulnerable to Sto…6.4
• CVE-2025-55641A NULL pointer dereference in the gf_isom_copy_sample_info f…5.5
• CVE-2025-55642GPAC MP4Box v2.4 was discovered to contain a floating point …6.5
• CVE-2025-55643A NULL pointer dereference in the TrackWriter handling compo…5.5
• CVE-2025-55644A heap use-after-free in the gf_node_get_tag function (scene…5.5
• CVE-2025-55645A heap buffer overflow in the gf_cenc_set_pssh function (iso…5.5
• CVE-2025-55648A heap buffer overflow in the gf_opus_parse_packet_header fu…5.5
• CVE-2025-55649A NULL pointer dereference in the gf_media_map_esd function …5.5
• CVE-2025-5565The Hide It plugin for WordPress is vulnerable to Stored Cro…6.4
• CVE-2025-55650A heap use-after-free in the gf_node_get_tag function (scene…5.5
• CVE-2025-55651A NULL pointer dereference in the gf_isom_get_user_data_coun…5.5
• CVE-2025-55652A heap buffer overflow in the gf_isom_vp_config_new function…5.5