CVE-2026-92475: GPAC downloader.c wait_for_header_and_parse out-of-bounds
A weakness has been identified in GPAC 26.08-DEV. This impacts the function waitforheaderandparse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read. The attack requires local access. The exploit has been made available to the public and could be used for attacks. Upgrading to version abi-16.26 will fix this issue. Patch name: c74a3065038ede35c1c7b75fa493a69ef6bcdb84. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GPAC 26.08-DEVto a version that resolves this vulnerability.Fixed in abi-16.26Patch c74a3065038ede35c1c7b75fa493a69ef6bcdb84
Event History
Frequently Asked Questions
Who is realistically exposed to this issue?
Systems using GPAC 26.08-DEV are affected. Exploitation requires local access and low privileges, so remote-only attackers cannot trigger it directly based on the available information.
What input is required for exploitation?
An attacker needs to manipulate the Content-Range argument processed by wait_for_header_and_parse in src/utils/downloader.c. This leads to an out-of-bounds read.
Is public exploit code available?
Yes. The exploit has been made publicly available and could be used in attacks.
What remediation is available?
Upgrade the affected GPAC component to version abi-16.26. The fix is identified by patch c74a3065038ede35c1c7b75fa493a69ef6bcdb84.