CVE-2026-90792

A null pointer dereference in the gf_node_list_get_child function (file scenegraph/base_scenegraph.c) of GPAC MP4Box (affected up to commit f1219cde) allows a remote attacker to crash the application by manipulating the Target argument. User interaction is required, and the primary impact is avai...