Threats tagged 'ghsa-7rfw-f449-3hh6'

GPAC versions through 26.07.0 have a NULL pointer dereference vulnerability in the MPEG-4 Form spatial-constraint handlers. This flaw occurs when processing crafted XMT scenes with Form constraints referencing non-existent groups, causing a crash in tools like MP4Box during chapter import. The vulnerability leads to denial of service by crashing the affected process.