PT-2026-110006 · Gpac · Gpac
CVSS v2.0
6.5
Medium
| Vector | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
GPAC versions prior to 26.07.0
Description
A use after free issue exists in the MP4Box component within the
gf mx v() function of the utils/os thread.c file. This flaw allows a remote attacker to trigger the condition through specific manipulation.Recommendations
Update GPAC to a version later than 26.07.0.
As a temporary mitigation, restrict the use of the
gf mx v() function within the MP4Box component.Exploit
Fix
Buffer Overflow
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Gpac