PT-2026-91255
CVE-2026-90793
·
Published
2026-09-14
·
Updated
2026-09-16
Description by
CVSS 2.0
6.4
MediumMetricsAV:N/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
GPAC versions prior to abi-16.23
Description
A use after free issue exists in the MP4Box component within the
gf node get name() function of the scenegraph/base scenegraph.c file. This flaw allows a remote attacker to trigger the condition through specific manipulation.Recommendations
Update to version abi-16.23.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾