A NULL pointer dereference exists in the gf_sg_vrml_field_clone() function of GPAC (commit 2d7da22e, 26.08‑DEV). The flaw is triggered when the function attempts to clone a PROTO default SFImage field whose source pointer is NULL. An attacker can supply a specially crafted input file that contains such a field, causing the function to dereference the NULL pointer and crash the GPAC process. The crash results in a denial of service; there is no mention of privilege escalation or code execution.

The vulnerability affects the GPAC multimedia framework, specifically the 2d7da22e (26.08‑DEV) snapshot and any builds that include the gf_sg_vrml_field_clone() routine without the recent patch.

The BS is not publicly rated with CVSS or EPSS, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that the attack vector involves providing a malicious file to GPAC, which is a local input attack. Exploitation requires the attacker to have the ability to supply the crafted file; remote exploitation is not described. The denial of service impact could affect any service that relies on GPAC to process media files.