CVE-2025-70307 Details

A stack-based buffer overflow vulnerability has been identified in GPAC version 2.4.0 within the 'dump_ttxt_sample' function, part of the ISO Media box dumping process. This vulnerability allows attackers to cause a denial-of-service by crafting an MP4 file with a timed text sample that includes an excessively large text length field, starting with a UTF-16 byte order mark. The flaw arises from an unchecked 'memcpy' operation, which can overwrite stack memory and potentially lead to exploitable memory corruption, depending on the application's build and environment.

To address this vulnerability, GPAC developers should implement proper length validation before the 'memcpy' operation, ensuring that the text length does not exceed the buffer capacity, and consider using dynamically allocated buffers based on validated input.