CVE-2026-8124

LOW EPSS 5.5%
Published May 8, 20261mo ago · Modified Jun 17, 20261w ago
1.9 CVSS 4.0
Low
Find Similar
Published May 8, 2026 1mo ago
Last Modified Jun 17, 2026 1w ago

Description

A security vulnerability has been detected in GPAC up to 26.02.0. This affects the function sidx_box_read of the file src/isomedia/box_code_base.c. The manipulation leads to allocation of resources. The attack must be carried out locally. The exploit has been disclosed publicly and may be used. The identifier of the patch is 442e2299530138d8f874fd885c565ba98a6318ba. It is suggested to install a patch to address this issue.

CVSS Details

Base Score
1.9
Exploitability
—
Impact
—
Vector string
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector Local
Attack Complexity Low
Privileges Required Low
User Interaction None
Scope X

Threat Intelligence

EPSS Exploit Probability
5.5% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 2

CWE-400 Uncontrolled Resource Consumption Resource Mgmt
CWE-770

Affected Products 1

VendorProductVersionRange
gpacgpac* ≤26.02.0

References 6

  • github.com https://github.com/gpac/gpac/
    Product
  • github.com https://github.com/gpac/gpac/commit/442e2299530138d8f874fd885c565ba98a6318ba
    Patch
  • github.com https://github.com/gpac/gpac/issues/3519
    ExploitIssue TrackingThird Party Advisory
  • vuldb.com https://vuldb.com/submit/808611
    ExploitThird Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/vuln/361914
    Third Party AdvisoryVDB Entry
  • vuldb.com https://vuldb.com/vuln/361914/cti
    Permissions RequiredVDB Entry

Remediation

  • github.com https://github.com/gpac/gpac/commit/442e2299530138d8f874fd885c565ba98a6318ba
    Patch