Vulnerability DatabaseCVE-2026-14801
Mend.io Vulnerability Database
The largest open source vulnerability database
What is a Vulnerability ID?
New vulnerability? Tell us about it!
CVE-2026-14801
Published:July 06, 2026
Updated:August 06, 2026
A security vulnerability has been detected in GPAC 26.03-DEV-rev342-g80071f700-master. The impacted element is the function txtin_probe_duration of the file src/filters/load_text.c of the component TeXML File Handler. Such manipulation of the argument txml_timescale leads to divide by zero. An attack has to be approached locally. The name of the patch is 86a5191f2e750c767253e27ed6cfd6d547afebc2. A patch should be applied to remediate this issue.
Related Resources (9)
https://github.com/gpac/gpac/issues/3610
https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/14xxx/CVE-2026-14801.json
https://vuldb.com/submit/850854
https://vuldb.com/vuln/376395
https://github.com/gpac/gpac/
https://vuldb.com/vuln/376395/cti
https://nvd.nist.gov/vuln/detail/CVE-2026-14801
https://github.com/gpac/gpac/commit/86a5191f2e750c767253e27ed6cfd6d547afebc2
https://vuldb.com/cve/CVE-2026-14801
Do you need more information?
Contact Us
CVSS v4
Base Score:
4.8
Attack Vector
LOCAL
Attack Complexity
LOW
Attack Requirements
NONE
Privileges Required
LOW
User Interaction
NONE
Vulnerable System Confidentiality
NONE
Vulnerable System Integrity
NONE
Vulnerable System Availability
LOW
Subsequent System Confidentiality
NONE
Subsequent System Integrity
NONE
Subsequent System Availability
NONE
Exploit Maturity
NOT DEFINED
CVSS v3
Base Score:
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW
Exploit Maturity
NOT DEFINED
Weakness Type (CWE)
Improper Resource Shutdown or Release
CWE-404
Divide By Zero
CWE-369
EPSS
Base Score:
0.11