The gf_isom_vp_config_get function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.
null dereference in gpac MP4Box gf_isom_vp_config_get
This is a GitHub Issue
repo:gpac
owner:gpac
Title : null dereference in gpac MP4Box gf_isom_vp_config_get
Issue date:

--- start body ---
None
--- end body ---

A null dereference vulnerability in the gpac MP4Box component can lead to application crashes or undefined behavior when handling certain MP4 files. This issue arises in the function gf_isom_vp_config_get, where the code does not properly check for null pointers before dereferencing them, potentially allowing an attacker to exploit this flaw by crafting a malicious MP4 file.