PT-2026-93856 · Gpac · Gpac

·

CVE-2026-92399

·

Published

2026-09-16

·

Updated

2026-09-18

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions GPAC version 26.07.0
Description A heap-based buffer overflow exists in the WebSocket Handler component within the rmt client handle ws frame() function of the src/utils/rmt ws.c file. This issue can be triggered remotely by manipulating the payload size argument.
Recommendations Update to version abi-16.26.

Exploit

Fix

Buffer Overflow

Heap Based Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-92399

Affected Products

Gpac