CVE-2024-6061 | GPAC 2.5-DEV-rev228-g11067ea92-master MP4Box isoffin_read.c isoffin_process infinite loop (Issue 2871)

A vulnerability has been found in GPAC 2.5-DEV-rev228-g11067ea92-master and classified as problematic. Affected by this vulnerability is the function isoffin_process of the file src/filters/isoffin_read.c of the component MP4Box. The manipulation leads to infinite loop.

This vulnerability is known as CVE-2024-6061. It is possible to launch the attack on the local host. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.