CyberRota Analysis
AI-GeneratedA vulnerability in GPAC 26.03-DEV affects the MP4Box component, specifically in the vobsub_read_idx function, where improper handling of the num_langs argument can lead to an out-of-bounds read. This issue requires local exploitation and has been publicly disclosed, making it essential for users of the affected version to prioritize applying the provided patch to mitigate potential risks. Organizations utilizing GPAC should address this vulnerability promptly to safeguard their systems.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/media_tools/vobsub.c of the component MP4Box. Executing a manipulation of the argument num_langs can lead to out-of-bounds read. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. This patch is called 532097084729a936bcdf6a27c41003f3bd7dc3ff. It is best practice to apply a patch to resolve this issue. Two different commits were applied to fix this issue.