Skip to main content

NULL Pointer Dereference

CVE-2025-55657

High
7.5/10

Summary

A NULL Pointer Dereference in the 'gf_odf_vvc_cfg_write_bs' function (odf/descriptors.c) of GPAC MP4Box allows attackers to cause a Denial-of-Service (DoS) via supplying a crafted MP4 file. This issue affects GPAC versions prior to 26.02.0 and abi-12 prior to abi-12.18.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-476 - NULL Pointer Dereference

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

References

Advisory Timeline

  • Published