Threats tagged 'ghsa-qvg3-xf4r-fgqm'

A low-severity security vulnerability exists in GPAC versions up to 26.02.0 in the sidx_box_read function of src/isomedia/box_code_base.c. The flaw involves resource allocation manipulation and requires local access to exploit. Public exploit code has been disclosed. A patch identified by commit 442e2299530138d8f874fd885c565ba98a6318ba is available to address the issue.