CVE-2026-109827Published
GPAC AIT Parser ait.c gf_m2ts_decode_ait out-of-bounds write
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-109827 · Microsoft / collected KEV context
cve-program · CVE-2026-109827
- https://vuldb.com/vuln/417465
- https://vuldb.com/vuln/417465/cti
- https://vuldb.com/cve/CVE-2026-109827
- https://vuldb.com/submit/1001680
- https://github.com/gpac/gpac/issues/3930
- https://github.com/gpac/gpac/pull/3932
- https://www.mediafire.com/file/zbpfhkgaf18cntf/poc_gpac_g1.zip/file
- https://github.com/gpac/gpac/commit/6d2c21a1a688abb20d0111b608db3b6f44d348f4
- https://github.com/gpac/gpac/
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.