Threats affecting pkg:github/gpac

GPAC versions up to and including 26.07.0 have a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers. This flaw allows attackers to cause a denial of service by crashing the process when a crafted XMT scene references a non-existent group during chapter import in tools like MP4Box.

GPAC versions up to and including 26.07.0 contain a use-after-free vulnerability in the function gf_sg_proto_del() within the VRML prototype handling code. This flaw occurs because gf_sg_reset() frees unregistered prototypes that are still referenced by scene commands. An attacker can exploit this by supplying a crafted XMT/BT scene with prototype declarations processed by the MP4Box -chap command, causing the process to access freed memory and crash.

A stack overflow in the pcmreframe_flush_packet function of GPAC v2.4.0 allows attackers to cause a Denial of Service (DoS) via a crafted WAV file.