CVE-2026-90576 GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

EUVD-2026-77054

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90573

GPAC MP4Box is vulnerable to a null pointer dereference in the function gf_sg_mfurl_del within the file scenegraph/vrml_tools.c . The vulnerability affects GPAC builds up to commit f1219cde and requires local access with low privileges to trigger. The impact is limited to a partial loss of availa...

CVE-2026-90573 GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...

CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2026-90782 S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2026-90782

S2OPC through 1.7.3 contains a null pointer dereference in the function msg_subscription_publish_bs__alloc_notification_message_items(). The root cause is that a failed heap allocation for a DataChangeNotification is overwritten by a subsequent successful allocation for an EventNotificationList ,...

CVE-2026-90782 S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

EUVD-2026-77009

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

CVE-2026-90782 S2OPC through 1.7.3 NULL Pointer Dereference in alloc_notification_message_items()

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

EUVD-2026-76913

A flaw has been found in IOBit Uninstaller 15.5.0.11. Affected by this issue is the function sub11838 of the file IURegistryFilter.sys of the component IOCTL Dispatch Handler. This manipulation causes null pointer dereference. The attack requires local access. The exploit has been published and m...

Linux Distros Unpatched Vulnerability : CVE-2026-90648

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - wasm2c in WebAssembly wabt through 1.0.41 allows sandbox escape in some situations that primarily involve 32-bit platforms, aka a table flip attack. It does not...

PT-2026-90983

The MQTT-SN client keepalive handler process ping in subsys/net/lib/mqtt sn/mqtt sn.c removes the gateway record after PINGREQ retries are exhausted. It invoked SYS SLIST PEEK HEAD CONTAINER&client-gateways, gw, next but discarded the result. That macro is a pure expression that does not assign t...

CVE-2026-90782: NULL Pointer Dereference

S2OPC through 1.7.3 contains a null pointer dereference in msgsubscriptionpublishbsallocnotificationmessageitems where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on sessions wit...

PT-2026-90942

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23 Description A null pointer dereference occurs in the MP4Box component within the gf node list add child function located in the scenegraph/base scenegraph.c file. This issue can be triggered by a local attacker...

CVE-2026-90576: NULL Pointer Dereference

A security vulnerability has been detected in GPAC up to f1219cde. Affected is the function gfnodelistaddchild of the file scenegraph/basescenegraph.c of the component MP4Box. Such manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The explo...

PT-2026-90857

S2OPC through 1.7.3 contains a null pointer dereference in msg subscription publish bs alloc notification message items where a failed allocation for DataChangeNotification is overwritten by a successful allocation for EventNotificationList. Attackers can trigger heap allocation failures on...

CVE-2026-90573: NULL Pointer Dereference

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfsgmfurldel of the file scenegraph/vrmltools.c of the component MP4Box. The manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit is publicly...