CVE-2026-14801: GPAC TeXML File load_text.c txtin_probe_duration divide by zero

Severity: low (CVSS 3.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-06 · updated 2026-07-06
Weakness: CWE-369

Description

A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c of the component TeXML File Handler. Such manipulation of the argument txml_timescale leads to divide by zero. An attack has to be approached locally. The name of the patch is 86a5191f2e750c767253e27ed6cfd6d547afebc2. A patch should be applied to remediate this issue.

Affected products

GPAC: 26.03-DEV-rev342-g80071f700-master

References

https://github.com/gpac/gpac/
https://github.com/gpac/gpac/commit/86a5191f2e750c767253e27ed6cfd6d547afebc2
https://github.com/gpac/gpac/issues/3610
https://vuldb.com/cve/CVE-2026-14801
https://vuldb.com/submit/850854
https://vuldb.com/vuln/376395
https://vuldb.com/vuln/376395/cti
https://github.com/gpac/gpac/issues/3610

Get alerted when CVE-2026-14801 or the next vulnerability affects your stack