CVE-2026-90578

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23

Description A use after free flaw exists in the MP4Box component within the gf list count() function of the utils/list.c file. This issue allows for local execution of a manipulation that can lead to memory corruption. Use after free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Upgrade to version abi-16.23.