PT-2026-90944

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf node get field of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. T...

PT-2026-90942

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A null pointer dereference occurs in the MP4Box component within the gf node list add child function located in the scenegraph/base scenegraph.c file. This issue can be triggered by a local attacker...

ROS-20260911-73-0018

The vulnerability of the gfnodetryDestroy function in the MP4Box multimedia platform of GPAC, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to cause a service failure...

ROS-20260911-73-0007

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after it is freed during processing an incorrect XMT scene, allows a perpetrator to cause a service failure...

ROS-20260911-73-0016

The vulnerability of the gfnodeunregister function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0001

The vulnerability of the InputSensorModified function in the MP4Box utility of the GPAC multimedia platform, which involves swapping the zero pointer during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0019

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after it is freed during the processing of an incorrect XMT script, allows a hacker to cause a service failure...

ROS-20260911-73-0024

The vulnerability of the gfsgsfcommanddel function in the MP4Box multimedia platform of GPAC allows for double memory release during processing of incorrect XMT scenes. This enables a violator to cause a service failure...

ROS-20260911-73-0008

The vulnerability of the gfnodeunregister function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0005

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0014

The vulnerability of the xmtnodestart function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0017

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0011

The vulnerability of the gfsgsfcommanddel function in the MP4Box multimedia platform of GPAC allows for double memory release during processing of incorrect XMT scenes. This enables a violator to cause a service failure...

ROS-20260911-73-0020

The vulnerability of the gfnodegetname function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0023

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a attacker to trigger a Denial-of-Service attack DoS...

ROS-20260911-73-0009

The vulnerability of the gfodfencodeuiconfig function in the MP4Box utility of the GPAC multimedia platform, related to the assignment of the null pointer during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0022

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a attacker to trigger a Denial-of-Service attack DoS...

ROS-20260911-73-0004

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0006

The vulnerability of the xmtdiscardsubtree function in the MP4Box utility of the GPAC multimedia platform arises from stack overflow during uncontrolled recursion when processing an incorrect XMT scene. This allows a malicious actor to cause service failure...

ROS-20260911-73-0003

The vulnerability of the xmtnodeend function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after it is freed during the processing of an incorrect XMT scene, allows a violator to trigger a service failure...