VulnSocial

CVE-2026-33144Disclosure(gpac / gpac)

LOWCVSS 7.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow (write) vulnerability was discovered in GPAC MP4Box. The vulnerability exists in the gf_xml_parse_bit_sequence_bs function in utils/xml_bin_custom.c when processing a crafted NHML file containing malicious <BS> (BitSequence) elements. An attacker can exploit this by providing a specially crafted NHML file, causing an out-of-bounds write on the heap. This issue has been via commit 86b0e36.

gpac CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • gpac

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
gpac
Products
gpac

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-03-21: 2Technical Details · 2026-03-21: 203-21
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-33144 GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow (write) vulnerability was discovered in GPAC MP4Box. The vulnerabil… https://www.cve.org/CVERecord?id=CVE-2026-33144 ----- Traducción: CVE-2026-33144 GPA… http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-33144, a heap-based buffer overflow in GPAC’s MP4Box preceding commit 86b0e36, with a link to the official CVE record for details.

    0000026
    61 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-33144 GPAC is an open-source multimedia framework. Prior to commit 86b0e36, a heap-based buffer overflow (write) vulnerability was discovered in GPAC MP4Box. The vulnerabil… https://www.cve.org/CVERecord?id=CVE-2026-33144

    Post summary

    The text announces CVE-2026-33144, a heap-based buffer overflow vulnerability in GPAC's MP4Box component.

    00000176
    56.8K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appgpacgpac---

Explore more

Back to dashboardgpac CVEsgpac vulnerabilities