עברית

Vulnerability Intelligence

CVE-2026-52489

High 7.8

Published
Last modified
NVD status
Awaiting Analysis

Description

Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameToImplementationName() function

References2

Metrics

CVSS 3.1
7.8 HIGH Score source: CNA CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS — exploit probability
0% percentile: 9 · as of 9 November 2026
CWE
CWE-120

Could this be exploited in your environment?

A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.