CVE-2026-15185 GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds

A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsubreadidx of the file /src/mediatools/vobsub.c of the component MP4Box. Executing a manipulation of the argument numlangs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been...

Out-of-bounds Read

libgpac.so is vulnerable to Out-of-bounds Reads. The vulnerability exists in the vobsubreadidx function at vobsub.c because the size of the buffer is not properly handled which allows an attacker to cause an application crash...