EUVD-2026-75133
GHSA-qv77-gh7v-8gwf
Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
5DescriptionCVE.org
Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6.
AnalysisAI
A stack buffer overflow in GPAC's NHNT demuxer (nhntdmx_process() in src/filters/dmx_nhnt.c) allows an attacker to execute arbitrary code when the affected build processes a crafted NHNT media file, because an unbounded strcpy/strcat writes a file-supplied media string into a fixed-size stack buffer. The flaw is rated 8.4 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and affects GPAC at commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3; it is fixed upstream in commit fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6, which replaces the unsafe calls with gf_strlcpy/gf_strlcat. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-120 – Classic Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today