CVE-2026-52489

Awaiting Analysis Awaiting Analysis - Queue

Buffer Overflow in GPAC via svgNameToImplementationName

Publication date: 2026-08-25

Last updated on: 2026-09-09

Assigner: MITRE

Description

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-25

Last Modified

2026-09-09

Generated

2026-09-15

AI Q&A

2026-08-26

EPSS Evaluated

2026-09-13

NVD

CVE-2026-52489

Affected Vendors & Products

Vendor	Product	Version / Range
gpac	gpac	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This is a Buffer Overflow vulnerability in the gpac software. It occurs in the svgNameToImplementationName() function and allows an attacker to execute arbitrary code by exploiting improper memory handling.

Detection Guidance

Detection requires checking for vulnerable versions of gpac. Inspect installed packages with commands like 'dpkg -l gpac' or 'rpm -qa | grep gpac'. If present, verify the version against the affected commit hash 31becc9e08b88e525a4a62013a4000de1c0f8fd9.

Impact Analysis

An attacker could exploit this to run malicious code on your system, potentially leading to unauthorized access, data theft, or system crashes if you use the vulnerable gpac software.

Mitigation Strategies

Update gpac to the latest patched version immediately. Disable SVG processing if not required. Monitor network traffic for unusual activity. Restrict access to affected systems until patched.

Hi! I’m here to help you understand CVE-2026-52489. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70