CVE-2026-92399 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

CVE-2026-92399 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

CVE-2026-92399 GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

Linux Distros Unpatched Vulnerability : CVE-2026-91090

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This...

Linux Distros Unpatched Vulnerability : CVE-2026-91087

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gfmogetodid of the file compositor/mediaobject.c of the component...

Linux Distros Unpatched Vulnerability : CVE-2026-90826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box...

PT-2026-93944

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description An out-of-bounds read occurs in the wait for header and parse function within the src/utils/downloader.c file. This issue is triggered by the manipulation of the Content-Range argument and requires local acce...

PT-2026-93927

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the BIFS Handler component within the gf sg command del function located in the src/scenegraph/commands.c file. This flaw allows for local exploitation through specific...

CVE-2026-92473: Use After Free

A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gfsgcommanddel of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free. The attack needs to be performed locally. The exploit is publicly available and migh...

PT-2026-93856

Name of the Vulnerable Software and Affected Versions GPAC version 26.07.0 Description A heap-based buffer overflow exists in the WebSocket Handler component within the rmt client handle ws frame function of the src/utils/rmt ws.c file. This issue can be triggered remotely by manipulating the...

PT-2026-93928

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free flaw exists in the Proto Link Handler component within the gf inline get proto lib function of the src/compositor/mpeg4 inline.c file. A use after free is a memory corruption issue where an...

CVE-2026-92474: Use After Free

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gfinlinegetprotolib of the file src/compositor/mpeg4inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the...

Linux Distros Unpatched Vulnerability : CVE-2026-90827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.07.0. This affects the function gfnodedeactivateex of the file scenegraph/basescenegraph.c of the component MP4Box. Su...

Linux Distros Unpatched Vulnerability : CVE-2026-91088

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler...

Linux Distros Unpatched Vulnerability : CVE-2026-90825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the...

Linux Distros Unpatched Vulnerability : CVE-2026-90824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The...

PT-2026-93908

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the MP4Box component within the gf node deactivate ex function located in the src/scenegraph/base scenegraph.c file. This flaw allows a local attacker to execute a manipulatio...

CVE-2026-92475: Out-of-bounds Read

A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and...

CVE-2026-92399: Heap-based Buffer Overflow

A vulnerability was determined in GPAC 26.07.0. This affects the function rmtclienthandlewsframe of the file src/utils/rmtws.c of the component WebSocket Handler. Executing a manipulation of the argument payloadsize can lead to heap-based buffer overflow. It is possible to launch the attack...

CVE-2026-92472: Use After Free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...