CVE-2026-1416 | GPAC up to 2.4.0 filedump.c DumpMovieInfo null pointer dereference (Issue 3427)

A vulnerability classified as problematic was found in GPAC up to 2.4.0. Affected by this vulnerability is the function DumpMovieInfo of the file applications/mp4box/filedump.c. The manipulation results in null pointer dereference.

This vulnerability is cataloged as CVE-2026-1416. The attack must be initiated from a local position. Furthermore, there is an exploit available.

It is advisable to implement a patch to correct this issue.