CVE-2026-90610 GPAC MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read

A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...

EUVD-2026-77165

A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made public an...

CVE-2026-90609

CVE-2026-90609 affects GPAC (up to commit f1219cde), specifically a null pointer dereference in the MP4Box component within the file scenegraph/vrml_tools.c. The vulnerability is triggered locally with low complexity and low privileges required, resulting in a low availability impact (likely a cr...

EUVD-2026-77146

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

CVE-2026-90609 GPAC MP4Box vrml_tools.c null pointer dereference

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

PT-2026-91003

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt parse element of the file scene manager/loader xmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

PT-2026-91004

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf sm dump command list of the file scene manager/scene dump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and migh...

UBUNTU-CVE-2026-90576

A security vulnerability has been detected in GPAC up to f1219cde. Aff...

PT-2026-91002

A vulnerability was found in GPAC up to f1219cde. This affects the function gf svg attributes copy of the file scenegraph/svg attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read. The attack is only possible with local access. The exploit has been made publi...

PT-2026-90996

A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrml tools.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been...

PT-2026-91017

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl GetSampleInfos of the file isomedia/stbl read.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit...

CVE-2026-90576

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-90578

A use-after-free vulnerability exists in the gf_list_count function (utils/list.c) of the MP4Box component in GPAC (affected up to commit f1219cde). The flaw can be triggered via local manipulation with low privileges required and no user interaction, leading to partial compromise of confidential...

EUVD-2026-77063

A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gflistcount of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used...

EUVD-2026-77062

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

CVE-2026-90577

CVE-2026-90577 is a heap-based buffer overflow in the MP4Box component of GPAC (up to commit f1219cde), specifically in the function gf_node_get_field within scenegraph/base_scenegraph.c. The vulnerability requires local access with low privileges and no user interaction, resulting in low impact ...

EUVD-2026-77061

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-90576

GPAC (up to commit f1219cde) contains a null pointer dereference in the function gf_node_list_add_child within scenegraph/base_scenegraph.c of the MP4Box component. A local attacker with low privileges can trigger a denial-of-service condition with no impact on confidentiality or integrity (CVSS ...

CVE-2026-90576 GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-90573

GPAC MP4Box is vulnerable to a null pointer dereference in the function gf_sg_mfurl_del within the file scenegraph/vrml_tools.c . The vulnerability affects GPAC builds up to commit f1219cde and requires local access with low privileges to trigger. The impact is limited to a partial loss of availa...