CVE-2026-50810

Received Received - Intake

NULL Pointer Dereference in GPAC Media Parser

Publication date: 2026-07-07

Last updated on: 2026-07-07

Assigner: MITRE

Description

A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 allows attackers to cause a denial of service

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-07

Last Modified

2026-07-07

Generated

2026-07-08

AI Q&A

2026-07-08

EPSS Evaluated

N/A

NVD

CVE-2026-50810

EUVD

EUVD-2026-42156

Affected Vendors & Products

Vendor	Product	Version / Range
gpac	gpac	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a NULL pointer dereference in the function smooth_parse_stream_index() located in the file src/media_tools/mpd.c of the GPAC project. It occurs in the master branch before a specific commit (b35c61f104b85fbb16520ac2838d5d2ef70845b5).

A NULL pointer dereference means that the program attempts to access or use a pointer that has not been properly initialized, leading to a crash or unexpected behavior.

In this case, attackers can exploit this flaw to cause a denial of service (DoS) by crashing the application.

Impact Analysis

This vulnerability can impact you by allowing attackers to cause a denial of service (DoS) condition in the affected software.

A denial of service means that the application or service using GPAC could crash or become unavailable, potentially disrupting normal operations.

Hi! I’m here to help you understand CVE-2026-50810. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70