https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T13:57:16.603666+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-03619 bdu:2026-03619 2026-10-08T13:57:16.708648+00:00 bdu:2026-03619 https://cve.radiocsirt.org/vuln/euvd-2026-269444 EUVD-2026-269444 2026-10-08T13:57:16.708700+00:00 EUVD-2026-269444 https://cve.radiocsirt.org/vuln/fkie_cve-2026-1416 fkie_cve-2026-1416 2026-10-08T13:57:16.708722+00:00

A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as d45c264c20addf0c1cc05124ede33f8ffa800e68. It is advisable to implement a patch to correct this issue.

 https://cve.radiocsirt.org/vuln/ghsa-q4m9-3fr6-f83p GHSA-q4m9-3fr6-f83p 2026-10-08T13:57:16.708764+00:00

A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as d45c264c20addf0c1cc05124ede33f8ffa800e68. It is advisable to implement a patch to correct this issue.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-1416 UBUNTU-CVE-2026-1416 2026-10-08T13:57:16.708790+00:00

Affected: Ubuntu:Pro:14.04:LTS: gpac, Ubuntu:Pro:16.04:LTS: gpac, Ubuntu:Pro:18.04:LTS: gpac, Ubuntu:Pro:20.04:LTS: gpac, Ubuntu:Pro:22.04:LTS: gpac, Ubuntu:Pro:24.04:LTS: gpac

A security flaw has been discovered in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is identified as d45c264c20addf0c1cc05124ede33f8ffa800e68. It is advisable to implement a patch to correct this issue.