What’s Vulnerable › Vulnerabilities

CVE-2026-79522

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2026-09-09 · updated 2026-09-15
• Weakness: CWE-125

Description

An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.

Affected products

• GPAC: 26.07.0

References

• https://github.com/gpac/gpac/commit/2fd5a06ab226767900fd86edb5a1e8bfc1010640
• https://github.com/gpac/gpac/issues/3861
• https://github.com/gpac/gpac/issues/3861

Get alerted when CVE-2026-79522 or the next vulnerability affects your stack