CVE-2025-70116: CVE-2025-70116: NULL işaretçi başvurusu

Açıklama (NVD)

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields (e.g., codec/mime/profile strings). gf_media_map_esd then calls strlen() on a NULL pointer, triggering a crash (ASan SEGV).

Özet bilgiler

CVSS v3.1

4.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

%0,44 (yüzdelik 39)

CWE

CWE-476

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• github.com
• infosec.exchange
• www.openwall.com
• github.com
• CWE-476