CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC version 2d7da22e (26.08-DEV) . The flaw is triggered when cloning a PROTO default SFImage field using a NULL source pointer . An attacker can provide a specially crafted input file to trigger this con...