The function gf_dash_get_timeline_duration in GPAC version 26.07.0 performs a division operation without validating that the divisor is non‑zero. When a crafted MPD SegmentTimeline provides a zero value, the function triggers a divide‑by‑zero error that crashes the process, resulting in a denial of service. The weakness is a classic divide‑by‑zero flaw that would allow an attacker to interrupt any application that processes vulnerable MPD files.

GPAC version 26.07.0 and any downstream applications that embed the library's dash client component are affected. The vulnerability is tied to the source file src/media_tools/dash_client.c and affects any build that includes the unpatched gf_dash_get_timeline_duration function.

The CVSS score is 6.5, reflecting a moderate severity with potential for systemic interruption. No EPSS value is available, and the issue is not listed in the CISA KEV catalog, indicating no known widespread exploitation at the time. The attack vector is inferred to involve feeding a malicious MPD file to an application using the dash client; the exploit requires the target to parse an MPD that contains a zero value in the SegmentTimeline element. While the description does not state remote delivery, any environment where untrusted MPD data is accepted could be vulnerable.