CVE-2026-90791

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23

Description A remote attack can trigger a use after free condition within the MP4Box component. This occurs during the execution of the gf node unregister() function located in the scenegraph/base scenegraph.c file. Use after free is a memory corruption issue where an application continues to use a pointer after it has been freed, potentially leading to crashes or arbitrary code execution.

Recommendations Update to version abi-16.23.