CVE-2025-60496
A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attacke
CVSS
5.5
Média
EPSS
0.4%
p35
KEV
—
Exploit Today
10
0-100
Publicado: 20 de out. de 2026 · Última mod.: 28 de out. de 2026 · CWE-1077
0.2%EPSS · 30 dias0.4%
2026-10-212026-11-07
A Floating-Point Exception (FPE) in the reframer_send_packet function (/filters/reframer.c) of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MP4 file.
- github.comhttps://github.com/gpac/gpac/commit/f03c946aae129980f0426d4cbae9746d0536fee6
- github.comhttps://github.com/gpac/gpac/issues/3334
- github.comhttps://github.com/sigdevel/pocs/blob/main/res/gpac/MP4Box/65/README.md
- infosec.exchangehttps://infosec.exchange/@sigdevel/117451461416101711
- www.openwall.comhttp://www.openwall.com/lists/oss-security/2026/10/22/25
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2022-49965.3 MÉD50.8%
——15A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. Executing a manipulation can lead to floating point comparison with incorrect operator. It is possible to launch the attack remotely. The exploit has been published and may be used. It is best practice to apply a patch to resolve this issue.79dCVE-2025-556586.5 MÉD22.4%
——7GPAC MP4Box v2.4 was discovered to contain a floating point exception in the gf_opus_parse_packet_header function (media_tools/av_parsers.c). bThis vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted MP4 file.108d