UBUNTU-CVE-2026-124031: Medium severity ubuntu/gpac vulnerability
GPAC through 26.07.0 contains a type confusion vulnerability in drawablegetaspect2dmpeg4() and TraverseShape() that casts a Shape's appearance node to MAppearance without checking its node tag. Attackers can supply a crafted XMT file placing another node type, such as Conditional, in the appearance field to trigger an invalid memory read and crash MP4Box.
Affected Software
Event History
Frequently Asked Questions
What must an attacker provide to trigger the crash?
The attacker must supply a crafted XMT file in which a Shape object's appearance field contains a node type other than the expected M_Appearance type, such as a Conditional node. Processing that file can cause MP4Box to perform an invalid memory read and crash.
Is user interaction required?
Yes. The vector indicates user interaction is required, meaning a user or workflow must cause MP4Box to process the crafted XMT file.
What is the practical impact described for affected systems?
The described impact is a denial of service: the invalid memory read can crash MP4Box. The provided data does not describe confidentiality or integrity impact.