CVE-2026-39103

Buffer Overflow vulnerability in GPAC before commit v391dc7f4d234988ea0bc3cc294eb725eddf8f702 allows an attacker to cause a denial of service via the src/scenegraph/svg_attributes.c, svg_parse_strings(), gf_svg_parse_attribute()

Score

CVSS 3.1 5.5 Medium

Status

Analyzed - cve@mitre.org

Published

2026-05-05

Last modified

2026-05-06

Weaknesses

CWE-122

Affected products

• Gpac (Gpac)

References

• https://github.com/gpac/gpac/commit/391dc7f4d234988ea0bc3cc294eb725eddf8f702
• https://github.com/gpac/gpac/issues/3506