CVE-2026-93331

A vulnerability was identified in GPAC 26.08-DEV. This vulnerability affects the function gf_rtp_parse_ttxt of the file src/ietf/rtp_depacketizer.c of the component RTP Depacketizer. Such manipulation of the argument size leads to out-of-bounds read. It is possible to launch the attack remotely. Upgrading to version abi-16.26 is able to resolve this issue. The name of the patch is 6bb0f64b4d1039c0fecd14ee2c1ee861d8661a68. The affected component should be upgraded.

• CWE-119
• CWE-125

• https://github.com/gpac/gpac/
• https://github.com/gpac/gpac/commit/6bb0f64b4d1039c0fecd14ee2c1ee861d8661a68
• https://github.com/gpac/gpac/issues/3868
• https://github.com/gpac/gpac/releases/tag/abi-16.26
• https://vuldb.com/cve/CVE-2026-93331
• https://vuldb.com/submit/942834
• https://vuldb.com/vuln/406641
• https://vuldb.com/vuln/406641/cti

Published

Sep 18, 2026

Last Modified

Sep 18, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9331The EDD Product Catalog Feed by PixelYourSite plugin for Wor…7.1
• CVE-2026-93310A vulnerability was identified in O-RAN-SC SMO OAM 2025-06-1…5.3
• CVE-2026-93311A vulnerability was detected in Freedesktop Poppler 26.07.0.…4.3
• CVE-2026-93312A flaw has been found in Freedesktop Poppler 26.07.0. Impact…4.3
• CVE-2026-93313A vulnerability was found in Freedesktop Poppler 26.07.0. Th…6.3
• CVE-2026-93314A vulnerability was determined in Freedesktop Poppler 26.07.…6.3
• CVE-2026-93337NetworkManager-l2tp contains an improper input validation vu…7.8
• CVE-2026-93338Grandstream GWN7660ELR before firmware version 1.0.27.6 cont…5.3
• CVE-2026-9334Cpanel::JSON::XS versions before 4.41 for Perl allow type co…7.3
• CVE-2026-9335A vulnerability in keras-team/keras versions <= 3.14.0 allow…6.5
• CVE-2026-9336IBM WebSphere Application Server 9.0, and 8.5 is vulnerable …7.5
• CVE-2026-93371A security vulnerability has been detected in marcopiovanell…8.3