CyberRota Analysis
AI-GeneratedA vulnerability in the RTP Depacketizer of GPAC versions prior to abi-16.26 allows for out-of-bounds read due to improper handling of argument sizes in the gf_rtp_parse_ttxt function, potentially enabling remote exploitation. Organizations utilizing GPAC in their media processing workflows should prioritize upgrading to the patched version to mitigate the risk of unauthorized access or data leakage. Immediate action is recommended to protect against potential attacks leveraging this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely. Upgrading to version abi-16.26 is able to resolve this issue. The name of the patch is 6bb0f64b4d1039c0fecd14ee2c1ee861d8661a68. The affected component should be upgraded.