PT-2026-97025

Name of the Vulnerable Software and Affected Versions GPAC version 2d7da22e 26.08-DEV Description A NULL pointer dereference occurs in the gf sg vrml field clone function when cloning a PROTO default SFImage field with a NULL source pointer. A remote attacker can cause an application crash and...

PT-2026-93927

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the BIFS Handler component within the gf sg command del function located in the src/scenegraph/commands.c file. This flaw allows for local exploitation through specific...

OSV-2026-855 Heap-use-after-free in gf_sg_reset

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=519588196 Crash type: Heap-use-after-free READ 8 Crash state: gfsgreset gfsgdel fuzzscene.c...

PT-2022-12633

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf sg destroy routes at scenegraph/vrml route.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2022-12612

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf sg vrml field pointer del at scenegraph/vrml tools.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, consider...

PT-2021-24218 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: An invalid free vulnerability exists via the gf sg command del function, which causes a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider disabling the gf sg command de...

PT-2021-24172

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0-DEV Description: A Null Pointer Dereference issue exists in the gf sg vrml mf alloc function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0-DEV, consider disabling the gf sg vrm...

PT-2021-24180

Name of the Vulnerable Software and Affected Versions: gpac version 1.1.0 Description: A null pointer dereference issue exists in the gf sg vrml mf append function, causing a segmentation fault and application crash. Recommendations: For gpac version 1.1.0, consider disabling the gf sg vrml mf...