CVE-2026-9572
GPAC MP4Box media.c Media_GetSample memory leak
A security vulnerability has been detected in GPAC up to 2.4.0. Affected by this issue is the function Media_GetSample of the file src/isomedia/media.c of the component MP4Box. Such manipulation of the argument cat leads to memory leak. The attack can only be performed from a local environment. The exploit has been disclosed publicly and may be used. The name of the patch is e79c5cbe8b3fed27f4854ec229457d30c96206f1. It is best practice to apply a patch to resolve this issue.
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
n/a · GPACpublic PoCs found — 1
cve_referencegithub.com/user-attachments/files/27270415/poc.zipunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →References
https://github.com/gpac/gpac/https://github.com/gpac/gpac/commit/e79c5cbe8b3fed27f4854ec229457d30c96206f1https://github.com/gpac/gpac/issues/3557https://github.com/user-attachments/files/27270415/poc.ziphttps://vuldb.com/submit/817137https://vuldb.com/vuln/365631https://vuldb.com/vuln/365631/cti