CVE-2026-90573

GPAC MP4Box is vulnerable to a null pointer dereference in the function gf_sg_mfurl_del within the file scenegraph/vrml_tools.c . The vulnerability affects GPAC builds up to commit f1219cde and requires local access with low privileges to trigger. The impact is limited to a partial loss of availa...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

EUVD-2026-77054

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90577: Heap-based Buffer Overflow

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfield of the file scenegraph/basescenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. The...

CVE-2026-90576: NULL Pointer Dereference

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

PT-2026-90945

A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gf list count of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used...

CVE-2026-90573: NULL Pointer Dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

PT-2026-90942

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A null pointer dereference occurs in the MP4Box component within the gf node list add child function located in the scenegraph/base scenegraph.c file. This issue can be triggered by a local attacker...

CVE-2026-90578: Use After Free

A flaw has been found in GPAC up to f1219cde. Affected by this issue is the function gflistcount of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack is restricted to local execution. The exploit has been published and may be used...

PT-2026-90930

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf sg mfurl del of the file scenegraph/vrml tools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

PT-2026-90944

A vulnerability was detected in GPAC up to f1219cde. Affected by this vulnerability is the function gf node get field of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow. The attack is only possible with local access. T...

ROS-20260910-73-0142

The vulnerability of the composerlayoutmodified function in the MP4Box utility of the GPAC multimedia platform, which relates to the issue of handling incorrect XMT scenes by resetting the null pointer, allows a malicious actor to trigger a service failure...

ROS-20260819-73-0046

The vulnerability of the vobsubreadidx function in the file /src/mediatools/vobsub.c of the MP4Box component of the GPAC multimedia platform is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the avidmx_process() function in the filters/dmx_avi.c file of the MP4Box packaging tool for the GPAC multimedia platform allows a hacker to induce a service failure.

The vulnerability of the avidmxprocess function in the filters/dmxavi.c file of the MP4Box packaging tool for the GPAC multimedia platform is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of the gf_filter_pid_inst_swap() function in the file /filter_core/filter_pid.c of the MP4Box multiplexer for multimedia platforms GPAC allows a hacker to cause a service failure.

The vulnerability of the gffilterpidinstswap function in the /filtercore/filterpid.c file of the MP4Box multiplexer for multimedia platforms GPAC is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_sei_load_from_state_internal() function in the /filters/sei_load.c file of the MP4Box packaging tool of the GPAC multimedia platform allows a attacker to cause a service failure.

The vulnerability of the gfseiloadfromstateinternal function in the /filters/seiload.c file of the MP4Box package from the GPAC multimedia platform is related to the possibility of exploiting memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failur...

The vulnerability of the gf_filter_in_parent_chain() function in the file /filter_core/filter_pid.c, implemented by the MP4Box component of the GPAC multimedia platform, allows a malicious actor to trigger a service failure.

The vulnerability of the gffilterinparentchain function in the /filtercore/filterpid.c file of the MP4Box encoder for the GPAC multimedia platform is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the gf_filter_pid_get_packet() function in the /filter_core/filter_pid.c file of the MP4Box multiplexing platform, which allows a hacker to cause a service failure.

The vulnerability of the gffilterpidgetpacket function in the /filtercore/filterpid.c file of the MP4Box multiplexer for GPAC multimedia platform is related to the possibility of using memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure by...