CVE-2026-79513 | CyberRota

CyberRota Analysis

AI-Generated

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function of GPAC v26.07.0 can be exploited by attackers to trigger a Denial of Service (DoS) through a specially crafted MPD SegmentTimeline. Organizations using this version of GPAC should prioritize patching to mitigate potential service disruptions. The fix is available in the latest update, so immediate action is recommended for affected users.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE

CVE-2026-79513

Severity

MEDIUM

CVSS

6.5

EPSS

0.21%

Original NVD Description

A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) of GPAC v26.07.0 allows attackers to cause a Denial of Service (DoS) via a crafted MPD SegmentTimeline. Fixed in 2fd5a06ab226767900fd86edb5a1e8bfc1010640.