CVE-2026-1416: GPAC filedump.c DumpMovieInfo null pointer dereference
A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as d45c264c20addf0c1cc05124ede33f8ffa800e68. It is advisable to implement a patch to correct this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1416?
CVE-2026-1416 has a medium severity rating due to the potential for a denial of service caused by the null pointer dereference.
How do I fix CVE-2026-1416?
To mitigate CVE-2026-1416, update GPAC to version 2.4.1 or later, which addresses the null pointer dereference issue.
What versions of GPAC are affected by CVE-2026-1416?
GPAC versions up to and including 2.4.0 are affected by CVE-2026-1416.
What happens if CVE-2026-1416 is exploited?
Exploitation of CVE-2026-1416 can lead to application crashes or a denial of service.
How can I determine if my system is vulnerable to CVE-2026-1416?
You can determine vulnerability to CVE-2026-1416 by checking if your GPAC installation is version 2.4.0 or earlier.