CVE-2026-39103: Buffer Overflow
Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the src/scenegraph/svgattributes.c, svgparsestrings(), gfsvgparseattribute()
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2026-39103?
CVE-2026-39103 has a high severity level due to the potential for denial of service attacks.
How do I fix CVE-2026-39103?
To fix CVE-2026-39103, update the GPAC software to version v391dc7f4d234988ea0bc3cc294eb725eddf8f702 or later.
What software is affected by CVE-2026-39103?
CVE-2026-39103 affects GPAC versions before v391dc7f4d234988ea0bc3cc294eb725eddf8f702.
What can an attacker do with CVE-2026-39103?
An attacker can exploit CVE-2026-39103 to cause a denial of service by triggering a buffer overflow.
What files are involved in the CVE-2026-39103 vulnerability?
The vulnerability is located in the src/scenegraph/svg_attributes.c file, specifically in the svg_parse_strings() and gf_svg_parse_attribute() functions.