Base Score

HIGH8.4

CVE-2025-25723

Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code.

VectorLOCAL

Published Bycve@mitre.org

Published DateFeb 28, 2025, 23:15

Weakness Type (CWE):CWE-120

CVSS Metrics

Base Score

8.4

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH

References

https://github.com/gpac/gpac/commit/74e26b8dfeb0ab8c7317603b80a18306d0698473
https://github.com/gpac/gpac/issues/3089

Base Score

HIGH8.4

Weakness Type (CWE):CWE-120

CVSS Metrics

Base Score

8.4

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Base Severity

HIGH

Version

3.1

Attack Vector (AV)

LOCAL

Attack Complexity (AC)

LOW

Privileges Required (PR)

NONE

User Interaction (UI)

NONE

Scope (S)

UNCHANGED

Confidentiality (C)

HIGH

Integrity (I)

HIGH

Availability (A)

HIGH