Skip to main content
VulnerabilityPublished Updated

gf_vvc_parse_nalu_bs · Gpac: Index-out-of-bounds

Affects gpacSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 31 Aug 2026, 15:41 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzgpacpkg:generic/gpacOther threatsAffected
  • >=99a7952e91938f8c0d16f2235b912de1fed6c1f8
  • =testtag0.1
  • =abi-12
  • =abi-12.16
  • =abi-12.17
  • =abi-12.18
  • =abi-12.19
  • =abi-12.20
  • =abi-12.21
  • =abi-12.22
  • =abi-12.23
  • =abi-12.24
  • =abi-12.25
  • =abi-12.26
  • =abi-12.27
  • =abi-13
  • =abi-13.0
  • =abi-14
  • =abi-14.0
  • =abi-15
  • =abi-15.0
  • =abi-15.1
  • =abi-15.2
  • =abi-16
  • =abi-16.2
  • =abi-16.3
  • =abi-16.4
  • =abi-16.5
  • =v26.02.0
  • =abi-16.6
  • =abi-16.7
  • =abi-16.8
  • =abi-16.9
  • =abi-16.10
  • =abi-16.11
  • =abi-16.12
  • =abi-16.13
  • =abi-16.14
  • =abi-16.15
  • =abi-16.16
  • =abi-16.17
  • =abi-16.18
  • =abi-16.19
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, avoid processing untrusted VVC video streams with affected versions of gpac to mitigate risk.

Description

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=70392 ``` Crash type: Index-out-of-bounds Crash state: gf_vvc_parse_nalu_bs gf_inspect_dump_nalu_internal inspect_process ```

References

Community reviews

Loading reviews…