The vulnerability is a floating‑point exception triggered in the avidmx_process routine of GPAC MP4Box version 2.4. When the function processes certain video segments, the exception causes the application to crash, resulting in a denial of service for users relying on that tool. This issue is classified as CWE‑369, indicating a divide‑by‑zero or arithmetic error leading to an unstable state.

GPAC MP4Box software, specifically version 2.4. No other vendor or product versions are listed as affected.

The CVSS score of 6.5 places the flaw in the medium severity range. The EPSS score of less than 1% indicates a very low probability that this vulnerability will be actively exploited. The CVE does not appear in the CISA KEV catalog. Based on the description, the attack likely requires a malicious MP4 file processed by the vulnerable function, suggesting a localized vector that could be abused in automated processing pipelines or by users who open untrusted media files.