CVE-2026-93331

GPAC 26.08-DEV contains an out-of-bounds read vulnerability in the RTP Depacketizer component, specifically in the function gf_rtp_parse_ttxt within src/ietf/rtp_depacketizer.c. The root cause is improper handling of the size argument, which can be manipulated to trigger an out-of-bounds read. Th...