CVE detail
CVE-2026-14790
A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be used. This patch is called bd1d94e70e3bef364c07c5a1d94eca5c9f56e160. A patch should be applied to remediate this issue. The project explains: "I would consider most of these more as bugs than vulns but anyway they're good to fix".
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 20.8 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 7
- within the 30d window
- Peak daily
- 7
- highest bucket
Evidence
Source links by recency
7 source links · newest first
- https://vuldb.com/vuln/376379/ctivuldb.com
No excerpt available.
Exploitvuldb.comJul 6, 2026, 3:16 AM - https://vuldb.com/vuln/376379vuldb.com
No excerpt available.
Exploitvuldb.comJul 6, 2026, 3:16 AM - https://vuldb.com/submit/850391vuldb.com
No excerpt available.
Exploitvuldb.comJul 6, 2026, 3:16 AM - https://vuldb.com/cve/CVE-2026-14790vuldb.com
No excerpt available.
Exploitvuldb.comJul 6, 2026, 3:16 AM - https://github.com/gpac/gpac/issues/3596github.com
No excerpt available.
Exploitgithub.comJul 6, 2026, 3:16 AM No excerpt available.
Exploitgithub.comJul 6, 2026, 3:16 AM- https://github.com/gpac/gpac/github.com
No excerpt available.
Exploitgithub.comJul 6, 2026, 3:16 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-17500CVSS 6.9 · Medium
A vulnerability was detected in ggml-org llama.cpp d006858/e15efe0. This affects the function _visit_pattern of the file common/json-schema-to-grammar.cpp. The manipulation result…
- CVE-2026-15690CVSS 1.3 · Low
A vulnerability was identified in open62541 up to 1.5.5. Affected by this issue is the function responseReadNamespacesArray of the file src/client/ua_client_connect.c of the compo…
- CVE-2026-15184CVSS 1.9 · Low
A vulnerability was found in GNU LibreDWG up to 0.13.4. The impacted element is the function dwg_next_entity of the file src/dwg.c of the component DWG File Handler. Performing a…
- CVE-2026-10298CVSS 1.9 · Low
A security flaw has been discovered in ggml-org whisper.cpp up to 1.8.2. This vulnerability affects the function whisper_model_load of the file ggml/src/ggml.c. The manipulation r…
- CVE-2026-10199CVSS 1.9 · Low
A vulnerability has been found in Assimp up to 6.0.4. Affected by this issue is the function glTF2::LazyDict in the library glTF2Asset.h. Such manipulation of the argument operato…
- CVE-2026-10198CVSS 1.9 · Low
A flaw has been found in Assimp up to 6.0.4. Affected by this vulnerability is the function Assimp::glTFImporter::ImportMeshes of the file glTFImporter.cpp of the component glTFIm…