Based on the description, it is inferred that an adversary can trigger a denial of service by supplying a crafted media file. A use‑after‑free flaw exists in the gf_filter_pid_inst_swap_delete_task function within the GPAC Project’s MP4Box component. The vulnerability allows an adversary to crash the media processing tool by supplying a specially crafted media file, resulting in an application or system denial of service.

The affected product is GPAC MP4Box. Any installation older than version 26.02.0 is potentially vulnerable. No specific vendor or product sub‑listing is available beyond the general GPAC Project designation.

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not provided, but based on the description it is inferred that the documented impact is a local or remote denial of service, achievable by providing a crafted MP4 file to the gf_filter_pid_inst_swap_delete_task function.