CVE-2026-109827 GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write

🗓️ 13 Oct 2026 16:45:16Reported by VulDBType

A vulnerability has been found in GPAC up to 26.07.0. This vulnerability affects the function gf_m2ts_decode_ait of the file src/media_tools/ait.c of the component AIT Parser. Such manipulation leads to out-of-bounds write. The attack may be launc...

Reporter	Title	Published	Views	Family All 4
Circl	CVE-2026-109827	13 Oct 202616:54	–	circl
CVE	CVE-2026-109827	13 Oct 202616:45	–	cve
EUVD	EUVD-2026-98926	13 Oct 202616:45	–	euvd
NVD	CVE-2026-109827	13 Oct 202617:17	–	nvd

[
  {
    "vendor": "n/a",
    "product": "GPAC",
    "versions": [
      {
        "version": "26.07",
        "status": "affected"
      }
    ],
    "cpes": [
      "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*"
    ],
    "modules": [
      "AIT Parser"
    ]
  }
]

Source	Link
mediafire	www.mediafire.com/file/zbpfhkgaf18cntf/poc_gpac_g1.zip/file
github	www.github.com/gpac/gpac/
github	www.github.com/gpac/gpac/issues/3930
vuldb	www.vuldb.com/submit/1001680
github	www.github.com/gpac/gpac/commit/6d2c21a1a688abb20d0111b608db3b6f44d348f4
vuldb	www.vuldb.com/vuln/417465
vuldb	www.vuldb.com/cve/CVE-2026-109827
vuldb	www.vuldb.com/vuln/417465/cti
github	www.github.com/gpac/gpac/pull/3932

13 Oct 2026 16:45Current

CVSS 45.3

CVSS 3.16.3

CVSS 36.3

CVSS 27.5