CVE-2025-7797

Name: CVE-2025-7797
Creator: NVD / NIST
Published: 2025-07-18T18:15:25.38+00:00
License: https://creativecommons.org/publicdomain/zero/1.0/

MEDIUMCVSS 5.5/10EPSS 0.87%

Last modified Jun 17, 2026

CVE-2025-7797 is a medium-severity vulnerability rated 5.5/10 on the CVSS scale. A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. EPSS estimates a 0.87% chance of exploitation in the next 30 days.

Description

A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf_dash_download_init_segment of the file src/media_tools/dash_client.c. The manipulation of the argument base_init_url leads to null pointer dereference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 153ea314b6b053db17164f8bc3c7e1e460938eaa. It is recommended to apply a patch to fix this issue.

Metrics

CVSS 3.1

5.3/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

CVSS 4.0

5.5/10

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS Probability

0.87%

54.2th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

Vendor	Product	Versions
Gpac	Gpac	<= 2.4.0

References

https://drive.google.com/file/d/1Z-C6RajpZ40ujo1iGNt3_mG855mPbs1Q/view?usp=share_linkExploit
https://github.com/gpac/gpac/commit/153ea314b6b053db17164f8bc3c7e1e460938eaaPatch
https://vuldb.com/?ctiid.316862Permissions Required, VDB Entry
https://vuldb.com/?id.316862Third Party Advisory, VDB Entry
https://vuldb.com/?submit.616664Third Party Advisory, VDB Entry

Timeline

Published: Jul 18, 2025
Last Modified: Jun 17, 2026
Status: Analyzed

Frequently Asked Questions

What is CVE-2025-7797?

How severe is CVE-2025-7797?

CVE-2025-7797 has a CVSS score of 5.5/10 (MEDIUM severity). The EPSS model estimates a 0.87% probability of exploitation in the next 30 days.

How do I fix CVE-2025-7797?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2025-7797?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST