CVE-2026-71613
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
GPAC 在 commit c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 版本中存在缓冲区溢出漏洞，攻击者可利用 函数执行任意代码。该漏洞已在 commit 9a253a07fd3f6b48022bba74302bf39388dda859 中修复。
Possible ATT&CK Techniques 2 AI
T1203 · Exploitation for Client Execution T1202 · Indirect Command Execution
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-71613
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_process() function. Fixed in 9a253a07fd3f6b48022bba74302bf39388dda859.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2026-71613
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-71613
请登录查看更多情报信息。
Other References for CVE-2026-71613 (2)
Same Patch Batch · n/a · 2026-09-09 · 11 CVEs total
| CVE-2026-39020 | 5.5 MEDIUM | Wings3D 2.4.1 恶意OBJ文件致拒绝服务 |
| CVE-2026-52482 | SJRC F11固件(2019-09-17)远程信息泄露漏洞 | |
| CVE-2025-51619 | Thesycon DPC 1.4.0 驱动内存越界致系统崩溃 | |
| CVE-2026-38998 | LIVE555 2026.02.26 释放后使用致DoS | |
| CVE-2026-79322 | Mageplaza Blog 4.3.2 存在SQL注入 | |
| CVE-2026-79324 | Mageplaza GDPR 4.2.9 缺失授权 | |
| CVE-2026-79323 | Magefan Blog GraphQL 2.2.1信息泄露 | |
| CVE-2026-71612 | GPAC指定版本nhntdmx_process缓冲区溢出 | |
| CVE-2026-71614 | GPAC c2dee3a 远程代码执行漏洞 | |
| CVE-2026-71616 | GPAC 指定提交前存在拒绝服务漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-71613
No comments yet