CVE-2026-14790: A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulat

lowCVSS 3.3CVE-2026-14790

A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulation can lead to null pointer dereference. The attack requires local access. The exploit has been published and may be used. This patch is called bd1d94e70e3bef364c07c5a1d94eca5c9f56e160. A patch should be applied to remediate this issue. The project explains: "I would consider most of these more as bugs than vulns but anyway they're good to fix".

Details

Source: NVD Recent CVEs (US · database · site)
Severity: low — CVSS 3.3
Published: 2026-07-06
Last updated: 2026-07-06
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-14790

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-147900.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-14790	coverage & exploitation status	NVD · CVE.org

Recent advisories for GPAC

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

lowCVE-2026-15185: A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of…nvd · 2026-07-09
mediumCVE-2026-50810: A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC mas…nvd · 2026-07-07
lowCVE-2025-15668: A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_d…nvd · 2026-07-06
lowCVE-2025-15667: A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function …nvd · 2026-07-06
lowCVE-2026-14801: A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The imp…nvd · 2026-07-06
lowCVE-2026-13523: A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file…nvd · 2026-06-29

CVE-2026-14790: A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the file src/filters/write_nhml.c of the component Media File Handler. Executing a manipulat

Details

Exploitation outlook

Referenced CVEs

Recent advisories for GPAC

More from NVD Recent CVEs