Skip to main content
VulnerabilityPublished Updated

Gpac: Stack-buffer-overflow

Affects gpacSource GCVE Database

0
Severity
Medium

Rated by Threat Radar

Data as of 17 Sep 2026, 20:35 UTC

What to do

Affected software

ProductAffectedFixed in
OSS-Fuzzgpacpkg:generic/gpacOther threatsAffected
  • >=99a7952e91938f8c0d16f2235b912de1fed6c1f8
  • =testtag0.1
  • =abi-12
  • =abi-12.16
  • =abi-12.17
  • =abi-12.18
  • =abi-12.19
  • =abi-12.20
  • =abi-12.21
  • =abi-12.22
  • =abi-12.23
  • =abi-12.24
  • =abi-12.25
  • =abi-12.26
  • =abi-12.27
  • =abi-13
  • =abi-13.0
  • =abi-14
  • =abi-14.0
  • =abi-15
  • =abi-15.0
  • =abi-15.1
  • =abi-15.2
  • =abi-16
  • =abi-16.2
  • =abi-16.3
  • =abi-16.4
  • =abi-16.5
  • =v26.02.0
  • =abi-16.6
  • =abi-16.7
  • =abi-16.8
  • =abi-16.9
  • =abi-16.10
  • =abi-16.11
  • =abi-16.12
  • =abi-16.13
  • =abi-16.14
  • =abi-16.15
  • =abi-16.16
  • =abi-16.17
  • =abi-16.18
  • =abi-16.19
  • =abi-16.20
Fixed in–

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Until a patch is available, users should monitor official gpac channels for updates and consider restricting input sources to trusted data to reduce exposure.

Description

A stack-buffer-overflow vulnerability exists in the gpac project's function gf_vvc_parse_nalu_bs, as reported by OSS-Fuzz. This vulnerability causes a write overflow of 4 bytes on the stack during parsing operations. The issue was identified through a crash report but no specific exploit or patch information is provided.

References

Community reviews

Loading reviews…