CVE-2025-60486
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-60486
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A heap use-after-free in the dasher_process function (/filters/dasher.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted MPEG-2 file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2025-60486
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-60486
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-60486 (2)
Same Patch Batch · n/a · 2026-06-01 · 35 CVEs total
| CVE-2026-10273 | 7.3 HIGH | php-censor Webhook Endpoint GitBuild.php os command injection |
| CVE-2026-10240 | 6.3 MEDIUM | JeecgBoot test server-side request forgery |
| CVE-2026-10239 | 6.3 MEDIUM | JeecgBoot edit WordUtil.addImage server-side request forgery |
| CVE-2026-10229 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_meshes heap-based overflow |
| CVE-2026-10232 | 5.3 MEDIUM | Assimp ASE File scene.cpp ~aiNode use after free |
| CVE-2026-10231 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp extract_anim_value heap-based overflow |
| CVE-2026-10230 | 5.3 MEDIUM | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_animations heap-based overflow |
| CVE-2026-10275 | 5.0 MEDIUM | OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_certwrite buffer overflow |
| CVE-2026-10294 | 4.3 MEDIUM | PackageKit API pk-transaction.c g_file_test improper authorization |
| CVE-2026-10300 | 3.7 LOW | SGLang Inference HTTP Endpoint lora_manager.py assertion |
| CVE-2026-10233 | 3.3 LOW | Assimp Half-Life 1 MDL Loader HL1MDLLoader.cpp read_sequence_infos out-of-bounds |
| CVE-2025-70099 | lwext4 1.0.0空指针解引用导致拒绝服务 | |
| CVE-2026-37234 | FlexRIC v2.0.0 SCTP资源泄露漏洞 | |
| CVE-2026-37230 | FlexRIC v2.0.0近实时RIC远程拒绝服务漏洞 | |
| CVE-2026-37229 | FlexRIC v2.0.0 E2AP协议拒绝服务漏洞 | |
| CVE-2026-37231 | FlexRIC v2.0.0 xApp ID重复导致iApp崩溃 | |
| CVE-2026-37233 | FlexRIC v2.0.0 xApp隔离机制授权绕过漏洞 | |
| CVE-2026-37226 | FlexRIC v2.0.0远程未认证拒绝服务漏洞 | |
| CVE-2026-37228 | FlexRIC v2.0.0断言绕过漏洞 | |
| CVE-2026-37232 | OpenAirInterface5G 2.4.0空指针除零致基站崩溃 |
Showing top 20 of 35 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-10300
SGLang Inference HTTP Endpoint lora_manager.py assertion - CVE-2026-10294
PackageKit API pk-transaction.c g_file_test improper authori - CVE-2026-10275
OpenSC pkcs11-tool Key Generation pkcs11-tool.c test_kpgen_c - CVE-2026-10273
php-censor Webhook Endpoint GitBuild.php os command injectio - CVE-2026-10240
JeecgBoot test server-side request forgery
V. Comments for CVE-2025-60486
No comments yet