CVE-2026-52489CWE-120

CVE-2026-52489

High · published August 26, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
8.3
In the wild
Unconfirmed
What it is

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00191 · 8.3th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-26T01:17Z
References (2)
https://gist.github.com/okyfh/96fc2f381892f4b79879a34f6e026a6f · [email protected]https://github.com/gpac/gpac/issues/3575 · [email protected]
EPSS history
Timeline
  • 27 AUG 06:35Z
    EPSS moved — → 0%
    epss
  • 25 AUG 00:00Z
    Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the…
    cvelistv5