CVE-2025-52293

HIGH

Exploit

A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data.

StatusModified

설명

A segmentation violaton in the gf_hevc_read_sps_bs_internal function (media_tools/av_parsers.c) of GPAC MP4Box v2.4 allows attackers to cause a Denial of Service (DoS) via supplying crafted HEVC SPS data.

Score Summary

CVSS Score: 7.5
Version: 3.1
VPI: 90
Why this VPI (explainable, experimental)
VPI breakdown
Impact 75.00
Exploitation signal(PoC exists) ×1.20
VPI 90.00
VPI formula vpi-v1
EPSS: 0.5%
(상위 37.5%)
Attack Vector: Network
Low Complexity
No Privileges
No User Interaction
Scope Unchanged
No Confidentiality Impact
No Integrity Impact
High Availability Impact

Details

Published: 06/09/2026(last month)
Modified: 06/14/2026(last month)
Source: NVD
Products: 1

CWE Weakness Classification

CWE-400
NVD
Secondary

References (2)

Affected Products (1)

목록으로

Dashboard

Vulnerabilities

Impact	75.00
Exploitation signal(PoC exists)	×1.20
VPI	90.00