https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-79522.htmlhttps://patchthecve.com/cve/CVE-2026-79522.htmlTue, 15 Sep 2026 17:01:40 +0000MEDIUM 6.5: An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.https://patchthecve.com/cve/CVE-2026-79514.htmlhttps://patchthecve.com/cve/CVE-2026-79514.htmlTue, 15 Sep 2026 17:03:02 +0000MEDIUM 6.5: An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via sending a crafted HTTP request. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.https://patchthecve.com/cve/CVE-2026-79513.htmlhttps://patchthecve.com/cve/CVE-2026-79513.htmlTue, 15 Sep 2026 17:03:15 +0000MEDIUM 6.5: A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.https://patchthecve.com/cve/CVE-2025-60467.htmlhttps://patchthecve.com/cve/CVE-2025-60467.htmlTue, 27 Oct 2026 01:19:03 +0000HIGH 7.5: A use-after-free in the gf_filter_pid_inst_swap_delete_task function (/filter_core/filter_pid.c) of GPAC Project/MP4Box before 26.02.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted media file.