Medium severity6.3NVD Advisory· Published Sep 30, 2026· Updated Sep 30, 2026

CVE-2026-103227

Description

A weakness has been identified in GPAC up to 26.07.0. Affected by this issue is the function gf_dash_resolve_url of the file src/media_tools/dash_client.c of the component DASH Client. This manipulation causes buffer overflow. The attack is possible to be carried out remotely. Upgrading to version abi-16.26 can resolve this issue. Patch name: 4c8e26f278ff63eec57968f7bc696f604bb0cffd. It is recommended to upgrade the affected component.

Affected products

Gpac/Gpacllm-fuzzy
Range: <26.07.0, abi-16.26

Patches

Vulnerability mechanics

References

github.com/gpac/gpac/commit/4c8e26f278ff63eec57968f7bc696f604bb0cffdnvd
github.com/gpac/gpac/issues/3876nvd
github.com/gpac/gpac/pull/3879nvd
github.com/gpac/gpac/releases/tag/abi-16.26nvd
vuldb.com/cve/CVE-2026-103227nvd
vuldb.com/submit/955033nvd
vuldb.com/vuln/411908nvd
vuldb.com/vuln/411908/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000