low3.3
CVE-2026-14801
A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master.
Impact
A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c of the component TeXML File Handler. Such manipulation of the argument txml_timescale leads to divide by zero. An attack has to be approached locally. The name of the patch is 86a5191f2e750c767253e27ed6cfd6d547afebc2. A patch should be applied to remediate this issue.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/gpac/gpac/
- https://github.com/gpac/gpac/commit/86a5191f2e750c767253e27ed6cfd6d547afebc2
- https://github.com/gpac/gpac/issues/3610
- https://vuldb.com/cve/CVE-2026-14801
- https://vuldb.com/submit/850854
- https://vuldb.com/vuln/376395
- https://vuldb.com/vuln/376395/cti
- https://github.com/gpac/gpac/issues/3610