Threats tagged 'ghsa-fm9r-fwrg-q26v'

GPAC versions prior to 26.02.0 have a type confusion vulnerability in the ctxload_process() function. This flaw allows crafted XMT files with URL-bearing descriptors to be passed unchecked to ODS_SetupOD(), leading to crashes in GPAC-based applications such as MP4Box. The vulnerability results in denial of service but does not impact confidentiality or integrity.