Threats tagged 'ghsa-f589-88mc-5jx5'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.8	CVE-2026-124031GPAC through 26.07.0 contains a type confusion vulnerability in drawable_get_aspect_2d_mpeg4() and TraverseShape() Medium6.82026-11-06GCVE DatabaseCVE-2026-124031 GPAC versions up to 26.07.0 have a type confusion vulnerability in the functions drawable_get_aspect_2d_mpeg4() and TraverseShape(). This flaw occurs because the code casts a Shape's appearance node to M_Appearance without verifying the node's tag, allowing crafted XMT files to cause invalid memory reads and crash MP4Box. The vulnerability is fixed in version 26.07.1. Report on CVE-2026-124031 Vulnerability CWE-843 #ghsa-f589-88mc-5jx5	GCVE Database	2026-11-06

Page 1 of 1