Buffer Overflow in GPAC via svgNameToImplementationName

Publication date: 2026-08-25

Last updated on: 2026-08-25

Assigner: MITRE

Description

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-08-25

Generated

2026-08-26

AI Q&A

2026-08-26

EPSS Evaluated

N/A

NVD

CVE-2026-52489

Affected Vendors & Products

Vendor	Product	Version / Range
gpac	gpac	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in the gpac software. It occurs in the svgNameToImplementationName() function and allows an attacker to execute arbitrary code by exploiting improper memory handling.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially leading to unauthorized access, data theft, or system crashes if you use the vulnerable gpac software.

Mitigation Strategies

Update gpac to the latest patched version immediately. Disable SVG processing if not required. Monitor network traffic for unusual activity. Restrict access to affected systems until patched.

Hi! I’m here to help you understand CVE-2026-52489. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70