CVE-2026-50871

An OS command injection vulnerability in the media archiving and export pipeline component of kanishka-linux Reminiscence v0.3.0 allows attackers to execute arbitrary commands via supplying a crafted input...

CVE-2026-11764

CVE-2026-11764 describes a data exposure where exporting all reusable media includes gift card secrets, even for users without permission to view gift cards. This indicates a permission boundary bypass, since the UI/API only reveal partial (first letters) of the secret, yet the export leaks full ...

CVE-2026-1415

A vulnerability was identified in GPAC up to 2.4.0. Affected is the function gfmediaexportwebvttmetadata of the file src/mediatools/mediaexport.c. The manipulation of the argument Name leads to null pointer dereference. The attack must be carried out locally. The exploit is publicly available and...

CVE-2026-1415

GPAC (up to 2.4.0) is affected by CVE-2026-1415 through the function gf_media_export_webvtt_metadata in src/media_tools/media_export.c, where manipulation of the Name argument triggers a null pointer dereference. Local access is required for exploitation, and a public exploit exists. The issue ha...

CVE-2026-1415

Removed by vendor...

GPAC code-related vulnerabilities

GPAC is an open-source multimedia framework developed by GPAC. Versions of GPAC prior to 2.4.0 have code vulnerabilities. These vulnerabilities stem from incorrect handling of parameters in the Name field in the src/mediatools/mediaexport.c file, which may lead to null pointer dereferencing...

The vulnerability of the gf_media_export Filters function in the MP4Box command of the GPAC multimedia platform, which allows a violator to cause a service failure.

The vulnerability of the gf-media-export-filters function in the MP4Box module of the GPAC multimedia platform is related to pointer manipulation errors. Exploiting this vulnerability allows a remote attacker to trigger a service failure using a specially created file...

CVE-2021-32438

The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

UBUNTU-CVE-2021-32438

The gfmediaexportfilters function in GPAC 1.0.1 allows attackers to cause a denial of service NULL pointer dereference via a crafted file in the MP4Box command...

PT-2021-6604

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1 Description The issue is related to the gf media export filters function in the MP4Box command of the GPAC multimedia platform, which is associated with NULL pointer dereference errors. This allows a remote attacker to cause...