CVE-2026-92399 Details
Description
A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame of the file src/utils/rmt_ws.c of the component WebSocket Handler. Executing a manipulation of the argument payload_size can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version abi-16.26 is able to mitigate this issue. This patch is called 37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12. Upgrading the affected component is recommended.
A heap-based buffer overflow vulnerability has been identified in GPAC version 26.07.0. The issue arises in the WebSocket handler function 'rmt_client_handle_ws_frame' within 'src/utils/rmt_ws.c'. When the function processes WebSocket frames with large payload sizes, the 'payload_size' can overflow, leading to improper memory allocation. This vulnerability can be exploited remotely by sending a crafted WebSocket frame, potentially allowing for memory corruption and arbitrary code execution.
Users are advised to upgrade to GPAC version abi-16.26, where this vulnerability has been fixed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Sep 16, 2026CISA-ADP
Assessed Sep 18, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/gpac/gpac/ | [email protected] | Vendor |
| https://github.com/gpac/gpac/commit/37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12 | [email protected] | Source CodeVendor |
| https://github.com/gpac/gpac/issues/3860 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://github.com/gpac/gpac/releases/tag/abi-16.26 | [email protected] | Release NotesVendor |
| https://github.com/user-attachments/files/31208030/poc_rmt_ws_malicious_frame.py | [email protected] | Broken LinkExploit |
| https://vuldb.com/cve/CVE-2026-92399 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/940250 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/405551 | [email protected] | Permission Required |
| https://vuldb.com/vuln/405551/cti | [email protected] | Permission Required |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
| CWE-122 | Heap-based Buffer Overflow | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| GPAC | 26.07.0 (semver) |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Sep 18, 2026 | CVE Modified | CISA-ADP |
| Sep 16, 2026 | New CVE Received | [email protected] |