Fantasy_2026

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http sendfile2 of the file lib/facil/http/http.c of the component Public Folder Handler. Performing a manipulation results in path traversal. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A flaw has been found in boazsegev facil.io up to 0.7.4. Affected is the function websocket on protocol error in the library lib/facil/http/parsers/websocket parser.h of the component WebSocket Frame Parser. This manipulation of the argument on message causes improper input validation. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

**Nome do Software Vulnerável e Versões Afetadas** GPAC versão 26.03-DEV-rev342-g80071f700-master **Description** Um problema local existe no componente TeXML File Handler, especificamente na função `txtin probe duration()` do arquivo `src/filters/load text.c`. A manipulação do argumento `txml timescale` pode resultar em uma condição de divisão por zero. **Recommendations** Aplicar o patch 86a5191f2e750c767253e27ed6cfd6d547afebc2 na versão 26.03-DEV-rev342-g80071f700-master.

**Nome do Software Vulnerável e Versões Afetadas** GPAC versão 26.03-DEV **Description** Um problema existe no componente MP4Box dentro da função `vobsub read idx()` do arquivo `/src/media tools/vobsub.c`. Um invasor local pode causar uma leitura fora dos limites (out-of-bounds read) ao manipular o argumento `num langs`. Uma leitura fora dos limites ocorre quando um programa lê dados além do final do buffer pretendido, potencialmente expondo informações sensíveis da memória. **Recommendations** Aplique o patch 532097084729a936bcdf6a27c41003f3bd7dc3ff na versão 26.03-DEV.