CVE-2026-71612

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2026-71612

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71612.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2026-71612

Downstream

UBUNTU-CVE-2026-71612

Published

2026-09-09T00:00:00Z

Modified

2026-09-11T09:01:28Z

Summary

[none]

Details

Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71612.json"
}

References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type

GIT

Repo

https://github.com/gpac/gpac

Events

Introduced

Fixed

fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6

Database specific

Show details

{
    "source": "REFERENCES"
}

Affected versions

Other

abi-12

abi-13

abi-14

abi-15

abi-16

abi-12.*

abi-12.16

abi-12.17

abi-12.18

abi-12.19

abi-12.20

abi-12.21

abi-12.22

abi-12.23

abi-12.24

abi-12.25

abi-12.26

abi-12.27

abi-13.*

abi-13.0

abi-14.*

abi-14.0

abi-15.*

abi-15.0

abi-15.1

abi-15.2

abi-16.*

abi-16.10

abi-16.11

abi-16.13

abi-16.14

abi-16.15

abi-16.16

abi-16.17

abi-16.2

abi-16.3

abi-16.4

abi-16.5

abi-16.6

abi-16.7

abi-16.8

abi-16.9

testtag0.*

testtag0.1

v0.*

v0.5.2

v0.6.0

v0.9.0

v0.9.0-preview

v1.*

v1.0.0

v2.*

v2.0.0

v2.2.0

v26.*

v26.02.0

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71612.json"

vanir_signatures

[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "34144032558250354912252173463688670685",
                "152597535231243534522649559743858704065",
                "23826973744873903103987719751101247587",
                "137233909081281085697453936811639441714",
                "101962769773302852976356330581388210718",
                "240337498606862279916537113763716144944",
                "183645509026748539292623684549944610407",
                "127510665614597000787083369637490602478",
                "136421332118889022899792289931640712267",
                "120872888049367235329222506221098020628"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-71612-7a17e279",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/gpac/gpac/commit/fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6",
        "target": {
            "file": "src/filters/dmx_nhnt.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "304992646338281608629421539530496773516",
            "length": 6030
        },
        "id": "CVE-2026-71612-a7cc6381",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/gpac/gpac/commit/fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6",
        "target": {
            "file": "src/filters/dmx_nhnt.c",
            "function": "nhntdmx_process"
        }
    }
]

vanir_signatures_modified

"2026-09-11T09:01:28Z"