Threats tagged 'ghsa-9pfc-f7m3-wf73'

GPAC versions before 26.02.0 have a NULL pointer dereference vulnerability in the function gf_node_get_field_by_name() located in src/scenegraph/base_scenegraph.c. This flaw allows attackers to cause a denial of service by crashing applications such as MP4Box or GPAC scene loader through supplying a crafted XMT scene referencing a node that was never created.