CVE catalog

CVE-2026-79513

UBUNTU-CVE-2026-79513

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.37% · Oct 25, 2026

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugpacpro0.5.0+svn4288~dfsg1-1ubuntu1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1+esm1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1+esm2vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1build1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-4ubuntu1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-5vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2vulnerable
Ubuntugpacpro1.0.1+dfsg1-4vulnerable
Ubuntugpacpro1.0.1+dfsg1-5vulnerable
Ubuntugpacpro2.0.0+dfsg1-2vulnerable
Ubuntugpacpro2.0.0+dfsg1-2ubuntu0.1~esm2vulnerable
Ubuntugpacpro2.2.1+dfsg1-3vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1build1vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1build2vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1ubuntu0.1~esm2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]