7 matches found
CVE-2026-124030
GPAC through 26.07.0 contains a type confusion vulnerability in gfsgcommandapply in src/scenegraph/commands.c that fails to verify BIFS field-replace command types match target node fields. Attackers can supply a crafted XMT file opened with MP4Box, such as via chapter import, causing...
CVE-2026-124030 GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace
GPAC through 26.07.0 contains a type confusion vulnerability in gfsgcommandapply in src/scenegraph/commands.c that fails to verify BIFS field-replace command types match target node fields. Attackers can supply a crafted XMT file opened with MP4Box, such as via chapter import, causing...
EUVD-2026-118438
GPAC through 26.07.0 contains a type confusion vulnerability in gfsgcommandapply in src/scenegraph/commands.c that fails to verify BIFS field-replace command types match target node fields. Attackers can supply a crafted XMT file opened with MP4Box, such as via chapter import, causing...
CVE-2026-124030
GPAC versions through 26.07.0 are vulnerable to a type confusion vulnerability within the gf_sg_command_apply() function in src/scenegraph/commands.c. The root cause is a failure to verify that BIFS field-replace command types match the target node fields. An attacker can provide a crafted XMT fi...
CVE-2026-124030 GPAC through 26.07.0 Type Confusion via gf_sg_command_apply XMT Field-Replace
GPAC through 26.07.0 contains a type confusion vulnerability in gfsgcommandapply in src/scenegraph/commands.c that fails to verify BIFS field-replace command types match target node fields. Attackers can supply a crafted XMT file opened with MP4Box, such as via chapter import, causing...
ROS-20260910-73-0145
The vulnerability of the gfsgcommandapply function in the MP4Box utility of the GPAC multimedia platform, which relates to the handling of incorrect XMT scenes by resetting the null pointer, allows a violator to trigger a service failure...
ROS-20260910-73-0169
The vulnerability of the gfsgcommandapply function in the MP4Box utility of the GPAC multimedia platform, which relates to the handling of incorrect XMT scenes by resetting the null pointer, allows a violator to trigger a service failure...