PULSE
ES
FEED
ransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransomn0n reclama a Froggys Fog · US · Retail & E-Commerceransomincransom reclama a Seetelhotels.de · DE · Hospitalityransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransomn0n reclama a Froggys Fog · US · Retail & E-Commerceransomincransom reclama a Seetelhotels.de · DE · Hospitality
← All CVEs
CVE WatchOct 19, 2026

CVE-2025-60480

A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c354

CVSS

—

No CVSS

EPSS

—

KEV

—

Exploit Today

0

0-100

Published: Oct 19, 2026 · Last modified: Oct 19, 2026

EPSS · 30d

Not enough EPSS history yet.

Technical description

A heap buffer overflow in the gf_odf_ac4_cfg_alternative_info function (/odf/descriptors.c) of GPAC Project/MP4Box 2.5-DEV-rev1593-gfe88c3545-master allows attackers to cause a Denial of Service (DoS) via supplying a crafted AC4 file.

Official references
Related CVEs

No related CVEs by CWE or product.