Skip to main content
VulnerabilityPublished Updated

gf_dash_group_get_template · Gpac: Heap-buffer-overflow

Affects gpacSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 17 Sep 2026, 20:35 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzgpacpkg:generic/gpacOther threatsAffected
  • >=7323c74ff523fa2d5c4db793d5dfbc611ae505c4
  • =testtag0.1
  • =abi-12
  • =abi-12.16
  • =abi-12.17
  • =abi-12.18
  • =abi-12.19
  • =abi-12.20
  • =abi-12.21
  • =abi-12.22
  • =abi-12.23
  • =abi-12.24
  • =abi-12.25
  • =abi-12.26
  • =abi-12.27
  • =abi-13
  • =abi-13.0
  • =abi-14
  • =abi-14.0
  • =abi-15
  • =abi-15.0
  • =abi-15.1
  • =abi-15.2
  • =abi-16
  • =abi-16.2
  • =abi-16.3
  • =abi-16.4
  • =abi-16.5
  • =v26.02.0
  • =abi-16.6
  • =abi-16.7
  • =abi-16.8
  • =abi-16.9
  • =abi-16.10
  • =abi-16.11
  • =abi-16.12
  • =abi-16.13
  • =abi-16.14
  • =abi-16.15
  • =abi-16.16
  • =abi-16.17
  • =abi-16.18
  • =abi-16.19
  • =abi-16.20
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a fix is available, avoid processing untrusted DASH content with affected versions of gpac to reduce risk.

Description

A heap-buffer-overflow vulnerability exists in the gpac project within the function gf_dash_group_get_template. This issue was reported by OSS-Fuzz and involves a write overflow on the heap. The vulnerability affects version 26.02.0 and versions at or after commit 7323c74ff523fa2d5dfbc611ae505c4. No CVSS score is available, and no known exploits in the wild have been reported.

References

Community reviews

Loading reviews…