Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-70116

Опубликовано: 27 мая 2026
Источник: nvd
CVSS3: 4.3
EPSS Низкий

Описание

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media_map_esd then calls strlen() on a NULL pointer, triggering a crash (ASan SEGV).

EPSS

Процентиль: 34%
0.00407
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-476

Связанные уязвимости

CVSS3: 4.3
ubuntu
3 месяца назад

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media_map_esd then calls strlen() on a NULL pointer, triggering a crash (ASan SEGV).

CVSS3: 4.3
debian
3 месяца назад

A NULL pointer dereference in GPAC MP4Box: when parsing certain trunca ...

CVSS3: 4.3
github
3 месяца назад

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media_map_esd then calls strlen() on a NULL pointer, triggering a crash (ASan SEGV).

EPSS

Процентиль: 34%
0.00407
Низкий

4.3 Medium

CVSS3

Дефекты

CWE-476