CVE-2026-71612: Buffer Overflow

Published Sep 9, 2026

Updated

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmxprocess() function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6.

Affected Software

1 affected component

Gpac GPAC

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade GPAC to a version that resolves this vulnerability.
Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6

Event History

Sep 9, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

Which GPAC builds are affected?

The issue affects the code before commit fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6. The provided data does not identify affected release version numbers.

What does an attacker need to do to exploit this vulnerability?

The vulnerability is reachable through the nhntdmx_process() function and can allow arbitrary code execution. The provided data does not specify the required input type, attacker access level, or delivery vector.

How can I remediate it?

Update GPAC to a build that includes commit fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6. No alternative mitigation is provided in the available data.