CVE-2021-46236

What it actually does

NULL pointer dereference in gf_sg_vrml_field_pointer_del at scenegraph/vrml_tools.c causes the process to crash when handling malformed VRML scene data.

Why it matters to the business

Attackers can remotely or locally crash the application, interrupting media processing workflows and requiring restarts until the vulnerable component is updated.

How an attack unfolds

An attacker supplies a specially crafted VRML file or scene that triggers the dereference during field pointer cleanup; public exploit code exists but has not led to widespread campaigns.

How to fix it

Upgrade glpi-project/glpi to commit 9a3c7487c8761eaa8f3b07589d6dcdfa5d1e4ed6 or later; rebuild any statically linked GPAC components and restart affected services.

How to confirm the fix worked

Confirm the updated commit is present in the source tree, recompile, and verify the application no longer crashes when opening the original proof-of-concept file.

Typical attack path

1. Obtain or generate a malicious VRML scene file
2. Deliver the file to the target application via local open or network upload
3. Trigger parsing and field deletion path in scenegraph handling
4. Cause immediate process termination resulting in denial of service

How to detect it

Review application and system logs around crash timestamps for segmentation faults or abrupt terminations when VRML files are processed; correlate with file upload or open events.

What your security team should do

• Apply the referenced commit immediately on all instances processing untrusted VRML or 3D scene data
• Scan build pipelines and dependency graphs for older GPAC versions
• Add file-type sandboxing or content validation for scene files until patches are deployed