Lucene search
+L

5635 matches found

OSV
OSV
added 2026/03/12 8:32 a.m.5 views

CVE-2026-4016 GPAC SVG Parser load_svg.c svgin_process out-of-bounds write

A security vulnerability has been detected in GPAC 26.03-DEV. Affected by this vulnerability is the function svginprocess of the file src/filters/loadsvg.c of the component SVG Parser. The manipulation leads to out-of-bounds write. Local access is required to approach this attack. The exploit has...

4.8CVSS5.4AI score0.00115EPSS
SaveExploits0References9
CVE
CVE
added 2026/03/12 8:32 a.m.19 views

CVE-2026-4015

CVE-2026-4015 affects GPAC 26.03-DEV, specifically the TeXML File Parser component (src/filters/load_text.c, function txtin_process_texml). A manipulation can trigger a stack-based buffer overflow, with local attack vector and public proof-of-concept exploit; impact is partial confidentiality, in...

5.3CVSS6AI score0.00127EPSS
SaveExploits0References8
ATTACKERKB
ATTACKERKB
added 2026/03/12 8:32 a.m.4 views

CVE-2026-4015

A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtinprocesstexml of the file src/filters/loadtext.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit...

5.3CVSS6AI score0.00127EPSS
SaveExploits0References8
OSV
OSV
added 2026/03/12 8:32 a.m.7 views

CVE-2026-4015 GPAC TeXML File load_text.c txtin_process_texml stack-based overflow

A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtinprocesstexml of the file src/filters/loadtext.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit...

4.8CVSS6.2AI score0.00127EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
added 2026/03/12 8:32 a.m.1 views

CVE-2026-4015 GPAC TeXML File load_text.c txtin_process_texml stack-based overflow

A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtinprocesstexml of the file src/filters/loadtext.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit...

5.3CVSS6.3AI score0.00127EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2026/03/12 8:32 a.m.5 views

CVE-2026-4015

A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtinprocesstexml of the file src/filters/loadtext.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit...

5.3CVSS5.7AI score0.00127EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/12 12:0 a.m.6 views

GPAC 安全漏洞

GPAC is an open-source multimedia framework developed by GPAC. The GPAC 26.03-DEV version contains a security vulnerability, which stems from a stack buffer overflow in the txtinprocesstexml function within the TeXML File Parser component...

5.3CVSS6.2AI score0.00127EPSS
SaveExploits0References8
CNNVD
CNNVD
added 2026/03/12 12:0 a.m.12 views

GPAC 缓冲区错误漏洞

GPAC is an open-source multimedia framework developed by GPAC. The GPAC 26.03-DEV version contains a buffer error vulnerability, which stems from an out-of-bounds write operation in the function svinprocess of the SVG Parser component’s src/filters/loadsvg.c file...

5.3CVSS6.2AI score0.00115EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/03/04 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-27821

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in...

8.7CVSS6AI score0.00272EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/02/27 4:13 a.m.8 views

CVE-2026-27821

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS5.6AI score0.00272EPSS
SaveExploits1References1
NVD
NVD
added 2026/02/26 12:16 a.m.8 views

CVE-2026-27821

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS0.00272EPSS
SaveExploits1References2
OSV
OSV
added 2026/02/26 12:16 a.m.7 views

UBUNTU-CVE-2026-27821

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS6AI score0.00272EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2026/02/26 12:8 a.m.3 views

CVE-2026-27821 GPAC NHML Demuxer (dmx_nhml.c) Vulnerable to Stack Buffer Overflow

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS6AI score0.00272EPSS
SaveExploits1References2
CVE
CVE
added 2026/02/26 12:8 a.m.17 views

CVE-2026-27821

GPAC has a stack-based overflow in NHML demuxer (dmx_nhml.c) affecting versions up to 26.02.0. The parser copies the xmlHeaderEnd attribute into a 1000-byte buffer with strcpy(), enabling overflow if input exceeds 1000 bytes. A fix is available via commit 9bd7137fded2db40de61a2cf3045812c8741ec52....

8.7CVSS5.6AI score0.00272EPSS
SaveExploits1References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/26 12:8 a.m.2 views

CVE-2026-27821

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS5.6AI score0.00272EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2026/02/26 12:8 a.m.6 views

CVE-2026-27821

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS5.6AI score0.00272EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/02/26 12:0 a.m.11 views

PT-2026-22061

Name of the Vulnerable Software and Affected Versions GPAC versions up to and including 26.02.0 Description GPAC is an open-source multimedia framework. A stack buffer overflow occurs during NHML file parsing in src/filters/dmx nhml.c. The xmlHeaderEnd XML attribute’s value from att-value is copi...

8.7CVSS6AI score0.00272EPSS
SaveExploits1References16
UbuntuCve
UbuntuCve
added 2026/02/26 12:0 a.m.6 views

CVE-2026-27821

GPAC is an open-source multimedia framework. In versions up to and including 26.02.0, a stack buffer overflow occurs during NHML file parsing in src/filters/dmxnhml.c. The value of the xmlHeaderEnd XML attribute is copied from att-value into szXmlHeaderEnd1000 using strcpy without any length...

8.7CVSS6AI score0.00272EPSS
SaveExploits1References3
Redos
Redos
added 2026/02/16 12:0 a.m.7 views

ROS-20260216-73-0019

Vulnerability in gpac related to operation out of buffer boundaries in memory. The vulnerability can be exploited remotely...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits1
Redos
Redos
added 2026/02/16 12:0 a.m.11 views

ROS-20260216-73-0016

Vulnerability in gpac related to incorrect resource cleanup or release. Exploitation of the vulnerability could allow an attacker to cause a denial of service...

4.8CVSS5.6AI score0.00196EPSS
SaveExploits1
Rows per page
Query Builder