Vulnerability · Published Sep 16, 2026 · Assigned by VulDB

CVE-2026-92399GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow

High 7.3

In plain English

A high-severity heap buffer overflow in GPAC. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).

Severity (CVSS 3.1)7.3High

Exploit odds (30 days)0.7%top 47.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

A vulnerability was determined in GPAC 26.07.0. This affects the function rmt_client_handle_ws_frame of the file src/utils/rmt_ws.c of the component WebSocket Handler. Executing a manipulation of the argument payload_size can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version abi-16.26 is able to mitigate this issue. This patch is called 37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12. Upgrading the affected component is recommended.

Affected products (as reported)

Vendor	Product	Versions
n/a	GPAC	26.07.0

Weakness: CWE-122, CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

References

VDB-405551 | GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow vdb-entry, technical-description
VDB-405551 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
CVE-2026-92399 | CVE Analysis and Report third-party-advisory
Submit #940250 | GPAC v26.07.0 (commit 2d7da22e) / master HEAD 6fed75df — fixed in 37bccbb Memory Corruption (CWE-122: Heap-based Buffer Overflow) third-party-advisory
https://github.com/gpac/gpac/issues/3860 issue-tracking
https://github.com/user-attachments/files/31208030/poc_rmt_ws_malicious_frame.py exploit
https://github.com/gpac/gpac/commit/37bccbb30cf53a0e1a084cea9a1ce422b3ddfe12 patch
https://github.com/gpac/gpac/releases/tag/abi-16.26 patch
https://github.com/gpac/gpac/ product