CVE-2026-50810

Description

A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before commit b35c61f104b85fbb16520ac2838d5d2ef70845b5 allows attackers to cause a denial of service

References

• https://gist.github.com/junius-sec/0c67bf67a268ff8861100bfc132e801c
• https://github.com/gpac/gpac/commit/b35c61f104b85fbb16520ac2838d5d2ef70845b5
• https://github.com/gpac/gpac/issues/3507