PT-2026-90942

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A null pointer dereference occurs in the MP4Box component within the gf node list add child function located in the scenegraph/base scenegraph.c file. This issue can be triggered by a local attacker...

CVE-2026-90576: NULL Pointer Dereference

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

PT-2026-90944

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf node get field of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. T...

CVE-2026-90577: Heap-based Buffer Overflow

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

CVE-2026-90573: NULL Pointer Dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

PT-2026-90945

A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf list count of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used...

PT-2026-90930

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf sg mfurl del of the file scenegraph/vrml tools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

ROS-20260911-73-0007

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after it is freed during processing an incorrect XMT scene, allows a perpetrator to cause a service failure...

ROS-20260911-73-0018

The vulnerability of the gfnodetryDestroy function in the MP4Box multimedia platform of GPAC, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to cause a service failure...

ROS-20260911-73-0001

The vulnerability of the InputSensorModified function in the MP4Box utility of the GPAC multimedia platform, which involves swapping the zero pointer during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0019

The vulnerability of the xmtresolveodlinks function in the MP4Box utility of the GPAC multimedia platform, which stems from the use of memory after it is freed during the processing of an incorrect XMT script, allows a hacker to cause a service failure...

ROS-20260911-73-0017

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0020

The vulnerability of the gfnodegetname function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0013

The vulnerability of the gfnodetryDestroy function in the MP4Box multimedia platform of GPAC, related to the use of memory after its release during processing of an incorrect XMT scene, allows a violator to cause a service failure...

ROS-20260911-73-0005

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0014

The vulnerability of the xmtnodestart function in the MP4Box utility of the GPAC multimedia platform, related to the use of memory after its release during processing an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0011

The vulnerability of the gfsgsfcommanddel function in the MP4Box multimedia platform of GPAC allows for double memory release during processing of incorrect XMT scenes. This enables a violator to cause a service failure...

ROS-20260911-73-0009

The vulnerability of the gfodfencodeuiconfig function in the MP4Box utility of the GPAC multimedia platform, related to the assignment of the null pointer during processing of an incorrect XMT scene, allows a violator to trigger a service failure...

ROS-20260911-73-0004

The vulnerability of the gfsgcommanddel function in the MP4Box utility of the GPAC multimedia platform arises from the use of memory after it is freed during the processing of an incorrect XMT scene. This vulnerability allows a malicious actor to cause a service failure...

ROS-20260911-73-0006

The vulnerability of the xmtdiscardsubtree function in the MP4Box utility of the GPAC multimedia platform arises from stack overflow during uncontrolled recursion when processing an incorrect XMT scene. This allows a malicious actor to cause service failure...