Threats tagged 'ghsa-6f4x-75w7-4j6r'

GPAC versions prior to 26.02.0 have a NULL pointer dereference vulnerability in the function gf_dash_group_get_audio_channels() located in src/media_tools/dash_client.c. This flaw can be triggered by attackers supplying a crafted DASH manifest with an AudioChannelConfiguration element missing the schemeIdUri or value fields, causing applications like MP4Box or GPAC DASH clients to crash and resulting in denial of service.