CVE-2026-8124: GPAC box_code_base.c sidx_box_read allocation of resources
A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidxboxread of the file src/isomedia/boxcodebase.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is 442e2299530138d8f874fd885c565ba98a6318ba. It is suggested to install a patch to address this issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GPACto a version that resolves this vulnerability.Patch 442e2299530138d8f874fd885c565ba98a6318ba
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8124?
CVE-2026-8124 is classified as a medium severity vulnerability that can lead to resource allocation issues.
How do I fix CVE-2026-8124?
To fix CVE-2026-8124, update GPAC to the latest version beyond 26.02.0.
Who is affected by CVE-2026-8124?
CVES-2026-8124 affects users of GPAC versions up to and including 26.02.0.
Is CVE-2026-8124 exploitable remotely?
No, CVE-2026-8124 requires local access to exploit the vulnerability.
What component of GPAC is impacted by CVE-2026-8124?
CVE-2026-8124 impacts the sidx_box_read function within the box_code_base.c file of GPAC.