CVE-2026-92399

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-92399
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92399.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-92399
Downstream
Published
2026-09-16T16:15:08Z
Modified
2026-09-18T08:10:18Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow
Details

A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame of the file src/utils/rmt_ws.c of the component WebSocket Handler. Executing a manipulation of the argument payload_size can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version abi-16.26 is able to mitigate this issue. This patch is called 37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12. Upgrading the affected component is recommended.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-119",
        "CWE-122"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/92xxx/CVE-2026-92399.json"
}
References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type
GIT
Repo
https://github.com/gpac/gpac
Events
Introduced
a07cbfff238a331233e11e916f9fb185d5da8604
Fixed
37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12
Fixed
c1a7cf55f59ef7954939c44f6b24b95c54469214
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "26.07.0"
        },
        {
            "last_affected": "26.07.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

26.*
26.07.0
abi-16.*
abi-16.22
abi-16.23
abi-16.24
abi-16.25
v26.*
v26.07.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-92399.json"
vanir_signatures 
[
    {
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "270395094011190084658753405103484577409",
                "166270095178778989230445956178718880561",
                "305238990725512740394269618140737979835",
                "250134317023930464039462420125309642271",
                "208980771966711693305413306147563988077",
                "144406941129539498280417551003194796801",
                "50346789963063025339067420089289553853",
                "319041155311837747112197280770453200948",
                "335282667009757390456955123510043906145",
                "280937728979152295577789304227767489204",
                "292077008852201610868301411416028906049",
                "153761557206386505805494466583349845420",
                "184719081481429025268124268235257624006",
                "338011553901935451224896099583885217264",
                "86132515388389824589382742976009898144",
                "236768225032545892445664161425516711196",
                "62616554626504317616826296346474108429",
                "155286010825778827379556718321033903199"
            ],
            "threshold": 0.9
        },
        "id": "CVE-2026-92399-c3096132",
        "signature_type": "Line",
        "signature_version": "v1",
        "source": "https://github.com/gpac/gpac/commit/37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12",
        "target": {
            "file": "src/utils/rmt_ws.c"
        }
    },
    {
        "deprecated": false,
        "digest": {
            "function_hash": "40385034327597556048692288610652696411",
            "length": 2902
        },
        "id": "CVE-2026-92399-e173d7b2",
        "signature_type": "Function",
        "signature_version": "v1",
        "source": "https://github.com/gpac/gpac/commit/37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12",
        "target": {
            "file": "src/utils/rmt_ws.c",
            "function": "rmt_client_handle_ws_frame"
        }
    }
]
vanir_signatures_modified 
"2026-09-18T08:10:18Z"