PT-2026-4719

CVE-2026-1416

Published

2026-01-26

Updated

2026-02-16

Description by

CVSS 3.1

3.3

Low

MetricsAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions GPAC versions up to 2.4.0

Description A security flaw exists in GPAC due to a null pointer dereference in the DumpMovieInfo function located in the applications/mp4box/filedump.c file. This manipulation can be initiated locally. The exploit for this issue has been publicly released and may be used in attacks.

Recommendations Implement the patch d45c264c20addf0c1cc05124ede33f8ffa800e68 to correct this issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-404: Improper Resource Shutdown or Release

CWE-476: NULL Pointer Dereference

Related identifiers