Skip to main content

Stack-based Buffer Overflow

CVE-2025-52292

Severity High
Score 7.5/10

Summary

A Stack Buffer Overflow in the 'filein_process' function (in_file.c) of GPAC MP4Box allows attackers to cause a Denial-of-Service (DoS) via supplying a crafted MP4 file. This issue affects GPAC versions prior to 26.02.0.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • HIGH

CWE-121 - Stack-based Buffer Overflow

A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Advisory Timeline

  • Published