PT-2026-43380

CVE-2026-9572

Published

2026-05-26

Updated

2026-07-06

Description by

CVSS 3.1

5.5

Medium

MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions GPAC versions prior to 2.4.1

Description A memory leak occurs in the MP4Box component within the Media GetSample() function located in the src/isomedia/media.c file. This issue is triggered by the manipulation of the cat argument and can only be executed from a local environment.

Recommendations Apply patch e79c5cbe8b3fed27f4854ec229457d30c96206f1 to resolve the issue.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-404: Improper Resource Shutdown or Release

CWE-401: Missing Release of Memory after Effective Lifetime

Related identifiers