CVE-2026-1417

Katalog CVE

CVSS 3.3 · Low EPSS 0,22%

Kerentanan Improper Resource Shutdown or Release pada gpac. Skor CVSS 3.1 3.3 (Low) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in GPAC up to 2.4.0. Affected by this issue is the function dump_isom_rtp of the file applications/mp4box/filedump.c. This manipulation causes null pointer dereference. The attack needs to be launched locally. The exploit has been made available to the public and could be used for attacks. Patch name: f96bd57c3ccdcde4335a0be28cd3e8fe296993de. Applying a patch is the recommended action to fix this issue.

Rincian

Terbit di NVD

26 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.3 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release
CWE-476: NULL Pointer Dereference

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/gpac/gpac/issues/3426 exploit · issue tracking · advisory vendor
• https://github.com/gpac/gpac/issues/3426#issue-3802172856 exploit · issue tracking · advisory vendor
• https://github.com/enocknt/gpac/commit/f96bd57c3ccdcde4335a0be28cd3e8fe296993de patch
• https://vuldb.com/?id.342806 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.736543 advisory pihak ketiga · vdb entry
• https://github.com/gpac/gpac/
• https://vuldb.com/?ctiid.342806 permissions required · vdb entry