Threats tagged 'ghsa-xx5j-3p7q-h39r'

GPAC versions up to 26.07.0 have a type confusion vulnerability in the gf_sg_command_apply() function. This flaw occurs because the function does not verify that BIFS field-replace command types match the target node fields. An attacker can exploit this by supplying a crafted XMT file, for example via chapter import in MP4Box, leading to a crash due to invalid memory access in gf_sg_vrml_field_clone(). The vulnerability is fixed in version 26.07.1.