{"id":"CVE-2025-55654","published":"2026-10-19T18:16:58.187","lastModified":"2026-10-19T21:14:14.150","description":"A use-after-free in the gf_filter_pid_get_packet function (filter_core/filter_pid.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying a crafted file.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/gpac/gpac/commit/0ccd2927c7145f5ab0352c5b15f787757b34eb18","tags":[]},{"url":"https://github.com/gpac/gpac/issues/3249","tags":[]},{"url":"https://infosec.exchange/@sigdevel/116769098607015606","tags":[]}],"exploitRefs":[{"url":"https://github.com/gpac/gpac/commit/0ccd2927c7145f5ab0352c5b15f787757b34eb18","tags":[]},{"url":"https://github.com/gpac/gpac/issues/3249","tags":[]}],"hasPoc":true,"ai":null}