CVE-2026-92475 | GPAC 26.08-DEV src/utils/downloader.c wait_for_header_and_parse Content-Range out-of-bounds (Issue 3859)

A vulnerability classified as problematic has been found in GPAC 26.08-DEV. This impacts the function wait_for_header_and_parse of the file src/utils/downloader.c. This manipulation of the argument Content-Range causes out-of-bounds read.

This vulnerability appears as CVE-2026-92475. The attack requires local access. In addition, an exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More