CVE-2026-52489: n/a

The vulnerability CVE-2026-52489 is a buffer overflow in the gpac project within the svgNameToImplementationName() function. Exploitation could lead to arbitrary code execution by an attacker with local access and low privileges, without requiring user interaction. The CVSS vector indicates low attack complexity and high impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time, and no known exploits in the wild have been reported.

Successful exploitation allows an attacker to execute arbitrary code on the affected system, potentially leading to full compromise of confidentiality, integrity, and availability. The attack requires local access with low privileges and does not require user interaction. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to gpac usage. Avoid running gpac with elevated privileges where possible.