CyberRota Analysis
AI-GeneratedThe vulnerability in GPAC 26.07.0 affects the MP4Box component, specifically the gf_node_del function, leading to an out-of-bounds read that can be exploited through local execution. While the severity is classified as low, the publicly disclosed nature of the exploit means that users should prioritize upgrading to version abi-16.23 to mitigate potential risks. Organizations utilizing GPAC should implement the patch to ensure their systems remain secure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gf_node_del of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized. Upgrading to version abi-16.23 can resolve this issue. Patch name: afca1f1181668d85941d51ed1adf647807d5d975. It is advisable to upgrade the affected component.