Arbitrary Code Execution Vulnerability in GPAC by GPAC Project
CVE-2026-71614

Currently unrated

Key Information:

Vendor: GPAC Project
Status: GPAC
Vendor: CVE Published:; 9 September 2026

🔔 Create GPAC Project Vulnerability Alert

What is CVE-2026-71614?

The GPAC library has a significant security vulnerability that allows attackers to execute arbitrary code. This issue arises from the src/media_tools/dvb_mpe.c file, specifically within the descriptorTime_slice_fec_identifier() and gf_m2ts_ipdatagram_reader() functions. When exploited, this vulnerability could lead to unauthorized access and control over the affected system. A fix has been implemented in the version identified by the commit 0e4093392e1f847c90d20e031e893cd942fef938.

References

https://github.com/gpac/gpac/issues/3614

https://github.com/gpac/gpac/commit/0e4093392e1f847c90d20...

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 9, 2026
Vulnerability Reserved
Aug 7, 2026

CVE-2026-71614 Data

JSON