EUVD-2026-66180
GHSA-4whx-6586-5f9m
Severity by source
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Local file processing attack (AV:L), low-privilege account sufficient (PR:L), no interaction beyond running the tool, full RCE impact across all pillars.
Primary rating from Vendor (mitre).
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function
AnalysisAI
Buffer overflow in GPAC's SVG parsing function svgNameToImplementationName() allows a local attacker with low privileges to execute arbitrary code with full confidentiality, integrity, and availability impact. The vulnerability is tied to a specific upstream commit (31becc9e08b88e525a4a62013a4000de1c0f8fd9) and is consistent with CWE-120 (classic buffer overflow, no bounds checking). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the attacker can supply a file containing SVG content that GPAC will parse - specifically a file that causes `svgNameToImplementationName()` to be invoked with an oversized or malformed SVG element name. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H scores 7.8 High, reflecting local exploitation with low complexity and low privilege requirements resulting in full system-level impact. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | No vendor-released patch version has been independently confirmed at time of analysis - the affected version is identified only by commit hash. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, inventory all systems and applications running GPAC and determine which handle SVG input, prioritizing systems exposed to untrusted content sources. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-120 – Classic Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today