CVE-2026-4015 Details
Description
A weakness has been identified in GPAC 26.03-DEV. Affected is the function txtin_process_texml of the file src/filters/load_text.c of the component TeXML File Parser. Executing a manipulation can lead to stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be used for attacks. This patch is called d29f6f1ada5cc284cdfa783b6f532c7d8bd049a5. Applying a patch is advised to resolve this issue.
A stack-based buffer overflow vulnerability has been identified in GPAC version 26.03-DEV. The issue arises in the TeXML File Parser component, specifically within the 'txtin_process_texml' function of 'src/filters/load_text.c'. The vulnerability is caused by a fixed-size stack array, 'GF_StyleRecord styles[50]', which is manipulated without proper bounds checking. This flaw allows a crafted TeXML file containing more than 50 '<sharedStyles>' blocks to overflow the stack. A similar issue exists with the 'Marker marks[50]' array, indicating a broader problem with stack management in this function. The vulnerability can be exploited locally, leading to potential code execution.
Users are advised to update to the latest version of GPAC, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Mar 12, 2026CISA-ADP
Assessed Mar 12, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/gpac/gpac/ | [email protected] | Vendor |
| https://github.com/gpac/gpac/commit/d29f6f1ada5cc284cdfa783b6f532c7d8bd049a5 | [email protected] | Source CodeVendor |
| https://github.com/gpac/gpac/issues/3467 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/gpac/gpac/issues/3467#issuecomment-3945864390 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/user-attachments/files/25493992/poc_texml_overflow.py | [email protected] | Broken LinkExploit |
| https://vuldb.com/?ctiid.350537 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/?id.350537 | [email protected] | AdvisoryExploitRemedy |
| https://vuldb.com/?submit.769797 | [email protected] | Technical Description |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-121 | Stack-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| GPAC | 26.03-DEV |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Apr 29, 2026 | Data Remediation | [email protected] |
| Mar 12, 2026 | New CVE Received | [email protected] |