CVE-2026-14801— GPAC TeXML File load_text.c txtin_probe_duration divide by zero
Possible ATT&CK Techniques 2AI
T1211 · Exploitation for Stealth T1068 · Exploitation for Privilege EscalationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-14801
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
GPAC TeXML File load_text.c txtin_probe_duration divide by zero
Source: CVE Program / CVE List V5
Vulnerability Description
A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c of the component TeXML File Handler. Such manipulation of the argument txml_timescale leads to divide by zero. An attack has to be approached locally. The name of the patch is 86a5191f2e750c767253e27ed6cfd6d547afebc2. A patch should be applied to remediate this issue.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
除零错误
Source: CVE Program / CVE List V5
Vulnerability Title
GPAC 数字错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
GPAC是GPAC团队开源的一款开源的多媒体框架。 GPAC 26.03-DEV-rev342-g80071f700-master版本存在安全漏洞，该漏洞源于TeXML File Handler组件src/filters/load_text.c文件中函数txtin_probe_duration对参数txml_timescale的操作导致除零错误，可能导致本地攻击者利用该漏洞造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | GPAC | 26.03-DEV-rev342-g80071f700-master | cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-14801
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-14801
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-14801 (1)
Vendor Advisories for CVE-2026-14801 (1)
Same Patch Batch · n/a · 2026-07-06 · 8 CVEs total
| CVE-2026-14792 | 6.5 MEDIUM | Formbricks Survey actions.ts access control |
| CVE-2025-15668 | 3.3 LOW | GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overflow |
| CVE-2025-15667 | 3.3 LOW | GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double free |
| CVE-2026-14790 | 3.3 LOW | GPAC Media File write_nhml.c nhmldump_send_frame null pointer dereference |
| CVE-2026-38976 | Hayato Ishida mruby/c 安全漏洞 | |
| CVE-2026-38973 | Hayato Ishida mruby/c 安全漏洞 | |
| CVE-2026-38979 | Ajenti Project Ajenti 安全漏洞 |
IV. Related Vulnerabilities
Same product: GPAC
- CVE-2026-15185
GPAC MP4Box vobsub.c vobsub_read_idx out-of-bounds - CVE-2025-15668
GPAC MP4Box box_code_base.c sgpd_del_entry heap-based overfl - CVE-2025-15667
GPAC MP4Box avc_ext.c gf_isom_nalu_sample_rewrite double fre - CVE-2026-14790
GPAC Media File write_nhml.c nhmldump_send_frame null pointe - CVE-2026-13523
GPAC ISOBMFF base_encoding.c data amplification
Same vendor: n/a
- CVE-2026-19965
automad Password Reset Endpoint UserController.php requestPa - CVE-2026-19955
TrailDB TOC Validation tdb.c tdb_open out-of-bounds - CVE-2026-19930
Dolibarr User Cloning card.php ldap injection - CVE-2026-19929
OpenBoxes Template Processing DocumentController.groovy buil - CVE-2026-19928
OpenBoxes Role Interceptor RoleInterceptor.groovy needManage
Same weakness: CWE-369
- CVE-2026-64951
Velociraptor DoS triggered by Divide by Zero panic - CVE-2026-19025
HDF5 divide-by-zero (SIGFPE) via mismatched chunk-layout dim - CVE-2026-67302
FreeRDP rdpecam StartStreamsRequest divide-by-zero denial of - CVE-2026-7007
Division by zero in Zephyr ext2 superblock parsing allows Do - CVE-2026-10679
Divide-by-zero in DesignWare SPI driver reachable from spi_t
V. Comments for CVE-2026-14801
No comments yet