rootpwn

high · CVSS v3 7.3 · CVSS v4 6.9

CVE-2026-93331

An out-of-bounds read vulnerability exists in the RTP Depacketizer component of GPAC 26.08-DEV, specifically within the gf_rtp_parse_ttxt fu

Overview

An out-of-bounds read vulnerability exists in the RTP Depacketizer component of GPAC 26.08-DEV, specifically within the gf_rtp_parse_ttxt function in src/ietf/rtp_depacketizer.c. The flaw is triggered via malicious manipulation of the size argument during remote processing. This could lead to information disclosure or application instability if not properly addressed.

Description

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely. Upgrading to version abi-16.26 is able to resolve this issue. The name of the patch is 6bb0f64b4d1039c0fecd14ee2c1ee861d8661a68. The affected component should be upgraded.

Impact

This vulnerability primarily impacts the confidentiality and availability of systems running vulnerable versions of GPAC when processing untrusted RTP streams. An attacker could potentially trigger crashes or read out-of-bounds memory remotely. Organizations processing media streams from external sources are at risk.

Remediation

Upgrade the GPAC software to version abi-16.26 or apply the official patch identified by commit hash 6bb0f64b4d1039c0fecd14ee2c1ee861d8661a68. Ensure that media parsing services are run with the principle of least privilege to limit potential impact.

Risk context

The vulnerability carries a CVSS v3 score of 7.3 (High) and a CVSS v4 score of 6.9, indicating a significant severity level for systems handling remote media. EPSS data is currently not available, but remediation should be prioritized based on exposure to untrusted network traffic.

Affected products

  • GPAC 26.08-DEV

Scores

Severity
high
CVSS v2
7.5
CVSS v3
7.3
CVSS v4
6.9
EPSS
—

GPAC Out-of-Bounds Read RTP Depacketizer High Severity Media Processing Remote

← All CVEs

Related CVEs

high

CVE-2026-93455

django-page-cms through version 2.0.13 contains an authorization bypass vulnerability in its admin helper views. The flaw allows low-privilege staff accounts to read unpublished drafts, page listings, and stored media paths without proper permission validation. This matters because it exposes sensitive organizational content to internal users who should not have access.

View analysis

high

CVE-2026-52727

The lxc-ci project inadvertently included a static pacman local-signing private key within Arch Linux container and virtual machine images built prior to May 28, 2026. This allows a malicious or compromised package mirror to issue cryptographically trusted packages to clients. Consequently, attackers can achieve arbitrary code execution as root on affected systems.

View analysis

high

CVE-2026-77169

A authorization bypass vulnerability exists in the team folders app when used alongside the workspace app. This flaw allows API-only delegated administrators to circumvent folder-level access restrictions. It matters because it undermines multi-tenant isolation and administrative privilege boundaries.

View analysis

high

CVE-2026-93313

An integer overflow vulnerability exists in Freedesktop Poppler version 26.07.0 within the JBIG2Stream::readCodeTableSeg function in poppler/JBIG2Stream.cc. This flaw can be triggered remotely via malicious PDF files containing crafted JBIG2 streams. It matters because successful exploitation could lead to application crashes or potentially arbitrary code execution in environments processing untrusted documents.

View analysis