CVE-2026-14790

GPAC 26.02.0 is affected in the Media File Handler, specifically the nhmldump_send_frame function in src/filters/write_nhml.c. A manipulation can cause a null pointer dereference, with local access required. An exploit has been published and a patch (bd1d94e70e3bef364c07c5a1d94eca5c9f56e160) is a...