Severity by source
AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from Vendor (mitre) · only source for this CVE.
CVSS VectorVendor: mitre
Lifecycle Timeline
4DescriptionCVE.org
An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via the function gf_route_media_complete_object(). Fixed in 3c4e6c5b3e0c6fa9b16d55599701a08354538fab.
AnalysisAI
Denial of service in GPAC's ROUTE/LCT demuxer (src/media_tools/route_dmx.c) is triggerable when the framework processes a crafted ROUTE session, causing uncontrolled resource consumption that ends in a crash or hang. Affected builds include the source tree at commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3, with the flaw fixed upstream in commit 3c4e6c5b3e0c6fa9b16d55599701a08354538fab. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-400 – Uncontrolled Resource Consumption
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today
EUVD-2026-75169
GHSA-95rr-7f3w-mphr