CVE-2026-14801: A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c

lowCVSS 3.3CVE-2026-14801

A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c of the component TeXML File Handler. Such manipulation of the argument txml_timescale leads to divide by zero. An attack has to be approached locally. The name of the patch is 86a5191f2e750c767253e27ed6cfd6d547afebc2. A patch should be applied to remediate this issue.

Details

Source: NVD Recent CVEs (US · database · site)
Severity: low — CVSS 3.3
Published: 2026-07-06
Last updated: 2026-07-06
Exploitation: Not in CISA KEV at last sync

Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-14801

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-148010.11% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 2% of all scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-14801	coverage & exploitation status	NVD · CVE.org

Recent advisories for GPAC

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

lowCVE-2026-15185: A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of…nvd · 2026-07-09
mediumCVE-2026-50810: A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC mas…nvd · 2026-07-07
lowCVE-2025-15668: A vulnerability was identified in GPAC up to b40ce70f5. This issue affects the function sgpd_d…nvd · 2026-07-06
lowCVE-2025-15667: A vulnerability was determined in GPAC up to 2.5-DEV. This vulnerability affects the function …nvd · 2026-07-06
lowCVE-2026-14790: A flaw has been found in GPAC 26.02.0. This affects the function nhmldump_send_frame of the fi…nvd · 2026-07-06
lowCVE-2026-13523: A weakness has been identified in GPAC up to 26.02.0. This affects an unknown part of the file…nvd · 2026-06-29

CVE-2026-14801: A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c

Details

Exploitation outlook

Referenced CVEs

Recent advisories for GPAC

More from NVD Recent CVEs