CVE-2025-70116: NULL Pointer Dereference

A NULL pointer dereference in GPAC MP4Box: when parsing certain truncated MP4 files, an unknown/invalid stsd entry can result in missing descriptor fields e.g., codec/mime/profile strings. gfmediamapesd then calls strlen on a NULL pointer, triggering a crash ASan SEGV...

dlplibs:key6fuzzer: Segv on unknown address in std::__1::deque<std::__1::deque<boost::variant<libetonyek::MoveTo, libetonyek::L

Detailed Report: https://oss-fuzz.com/testcase?key=5752428626706432 Project: dlplibs Fuzzing Engine: honggfuzz Fuzz Target: key6fuzzer Job Type: honggfuzzasandlplibs Platform Id: linux Crash Type: Segv on unknown address Crash Address: Crash State:...