602 matches found
EUVD-2026-77168
A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...
CVE-2026-90613
GPAC (component MP4Box ) contains a reachable assertion vulnerability in the function stbl_GetSampleInfos within the file isomedia/stbl_read.c , affecting versions up to commit f1219cde. The attack requires a local position with low privileges and results in a low availability impact (denial of s...
EUVD-2026-77167
A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...
CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion
A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...
CVE-2026-90612
A reachable assertion vulnerability exists in GPAC (up to commit f1219cde), specifically in the function gf_sm_dump_command_list within the file scene_manager/scene_dump.c of the MP4Box component. The flaw can be triggered locally with low privileges and low complexity, resulting in a denial of s...
CVE-2026-90611
CVE-2026-90611 affects GPAC (up to commit f1219cde), specifically the xmt_parse_element function in scene_manager/loader_xmt.c of the MP4Box component. A crafted manipulation triggers a reachable assertion , leading to a crash with low availability impact. The attack vector is local , requires lo...
CVE-2026-90611 GPAC MP4Box loader_xmt.c xmt_parse_element assertion
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
EUVD-2026-77166
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
PT-2026-91003
A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmt parse element of the file scene manager/loader xmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...
PT-2026-91004
A vulnerability was identified in GPAC up to f1219cde. Affected is the function gf sm dump command list of the file scene manager/scene dump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and migh...
PT-2026-91202
A vulnerability was found in Dvidelabs flatcc up to 0.6.3. This affects the function analyze struct of the file src/compiler/semantics.c of the component Struct Analysis. The manipulation results in reachable assertion. It is possible to launch the attack remotely. The exploit has been made publi...
PT-2026-91017
A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl GetSampleInfos of the file isomedia/stbl read.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit...
CVE-2026-66754-Remote-Denial-of-Service-via-Reachable-Assertion-in-URL-Prefix-Handling-rouille-
Security Advisory: Remote Denial of Service via Reachable Assertion in URL Prefix Handling rouille Assigned CVE ID: CVE-2026-66754 Summary Request::removeprefix tests the percent-decoded URL but asserts on the raw one. A request whose decoded path starts with the prefix while its raw path does no...
Security Advisory 0172
Security Advisory 0172 PDF Date: September 9, 2026 Revision | Date | Changes ---|---|--- 1.0 | September 9, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-73438 CVSSv3.1 Base Score: 5.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 7.0...
Linux Distros Unpatched Vulnerability : CVE-2026-86317
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cp...
DEBIAN-CVE-2026-86317
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...
EUVD-2026-72459
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...
CVE-2026-86317 ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...
CVE-2026-86317
A vulnerability was detected in ggml-org llama.cpp up to 0.4.0. This impacts the function rpcserver::deserializetensor of the file ggml/src/ggml-rpc/ggml-rpc.cpp of the component RPC Server. Performing a manipulation of the argument ne results in reachable assertion. The attack is possible to be...
