CVE-2026-90687

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23

Description A use after free issue exists in the MP4Box component within the gf node changed internal() function of the scenegraph/base scenegraph.c file. This flaw allows a remote attacker to trigger the condition through specific manipulation. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Update to version abi-16.23.