Debian · Gpac · CVE-2026-4016
**Name of the Vulnerable Software and Affected Versions**
GPAC version 26.03-DEV
**Description**
A security issue has been identified in GPAC 26.03-DEV. The `svgin process` function within the SVG Parser component, located in the file `src/filters/load svg.c`, is susceptible to an out-of-bounds write condition. Local access is required for exploitation. The exploit for this issue has been publicly disclosed. The patch identifier is `7618d7206cdeb3c28961dc97ab0ecabaff0c8af2`.
**Recommendations**
Install the patch with identifier `7618d7206cdeb3c28961dc97ab0ecabaff0c8af2` to address this issue.