A use-after-free in the gf_sei_load_from_state_internal function (/filters/sei_load.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 TS file.
| Vendor | Product | Versions |
|---|---|---|
| gpac project | mp4box | n/a |
Updated description with more technical detail, changed severity to MEDIUM, updated CVSS to 4.3, added CWE-476, and specified the patch available.
Updated vendor and product information, marked severity as CRITICAL, and noted that an exploit is available and the vulnerability is actively exploited.
Initial creation
