{"id":"CVE-2026-71612","details":"Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_process() function. Fixed in fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6.","modified":"2026-09-11T09:01:28.363406Z","published":"2026-09-09T00:00:00Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71612.json"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/71xxx/CVE-2026-71612.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-71612"},{"type":"REPORT","url":"https://github.com/gpac/gpac/issues/3612"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"fixed":"fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6"}],"database_specific":{"source":"REFERENCES"}}],"versions":["abi-16.17","abi-16.16","abi-16.15","abi-16.14","abi-16.13","abi-16.11","abi-16.10","abi-16.9","abi-16.8","abi-16.7","abi-16.6","v26.02.0","abi-16.5","abi-16.4","abi-16.3","abi-16.2","abi-16","abi-15.2","abi-15.1","abi-15.0","abi-15","abi-14.0","abi-14","abi-13.0","abi-13","abi-12.27","abi-12.26","abi-12.25","abi-12.24","abi-12.23","abi-12.22","abi-12.21","abi-12.20","abi-12.19","abi-12.18","abi-12.17","abi-12.16","abi-12","testtag0.1","v2.2.0","v2.0.0","v1.0.0","v0.9.0","v0.9.0-preview","v0.6.0","v0.5.2"],"database_specific":{"vanir_signatures_modified":"2026-09-11T09:01:28Z","vanir_signatures":[{"target":{"file":"src/filters/dmx_nhnt.c"},"deprecated":false,"digest":{"line_hashes":["34144032558250354912252173463688670685","152597535231243534522649559743858704065","23826973744873903103987719751101247587","137233909081281085697453936811639441714","101962769773302852976356330581388210718","240337498606862279916537113763716144944","183645509026748539292623684549944610407","127510665614597000787083369637490602478","136421332118889022899792289931640712267","120872888049367235329222506221098020628"],"threshold":0.9},"id":"CVE-2026-71612-7a17e279","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6"},{"target":{"function":"nhntdmx_process","file":"src/filters/dmx_nhnt.c"},"deprecated":false,"digest":{"function_hash":"304992646338281608629421539530496773516","length":6030},"id":"CVE-2026-71612-a7cc6381","signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/fac50e6a12ac27ffabdd5d3080b51afcc44ad8d6"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-71612.json"}}],"schema_version":"1.9.0"}