[SECURITY] Fedora 45 Update: gpac-26.07.0-4.fc45

GPAC is a multimedia framework based on the MPEG-4 Systems standard developed from scratch in ANSI C. The original development goal is to provide a clean, small and flexible alternative to the MPEG-4 Systems reference software. GPAC features the integration of recent multimedia standards SVG/SMIL...

Linux Distros Unpatched Vulnerability : CVE-2026-93331

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component...

CVE-2026-88339: NULL Pointer Dereference

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

EUVD-2026-84855

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gf_sg_vrml_field_clone() function of GPAC 2d7da22e (26.08-DEV) . The flaw is triggered when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can exploit this by providing a specially crafted input file , which res...

PT-2026-97025

Name of the Vulnerable Software and Affected Versions GPAC version 2d7da22e 26.08-DEV Description A NULL pointer dereference occurs in the gf sg vrml field clone function when cloning a PROTO default SFImage field with a NULL source pointer. A remote attacker can cause an application crash and...

CVE-2026-88339

A NULL pointer dereference vulnerability exists in the gfsgvrmlfieldclone function of GPAC 2d7da22e 26.08-DEV. The vulnerability occurs when cloning a PROTO default SFImage field with a NULL source pointer. An attacker can provide a specially crafted input file that triggers the condition,...

CVE-2026-93331

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

CVE-2026-93331

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

UBUNTU-CVE-2026-93331

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

CVE-2026-93331 GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

EUVD-2026-82639

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

CVE-2026-93331

GPAC 26.08-DEV contains an out-of-bounds read vulnerability in the RTP Depacketizer component, specifically in the function gf_rtp_parse_ttxt within src/ietf/rtp_depacketizer.c. The root cause is improper handling of the size argument, which can be manipulated to trigger an out-of-bounds read. Th...

CVE-2026-93331 GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

CVE-2026-93331 GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gfrtpparsettxt of the file src/ietf/rtpdepacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely...

Linux Distros Unpatched Vulnerability : CVE-2026-92475

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the...

PT-2026-95216

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description An out-of-bounds read can be triggered remotely in the RTP Depacketizer component. The issue exists within the gf rtp parse ttxt function located in the src/ietf/rtp depacketizer.c file, where manipulation of...

Linux Distros Unpatched Vulnerability : CVE-2026-92473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gfsgcommanddel of the file src/scenegraph/commands.c of the component BIF...