PT-2026-91256

CVE-2026-90794

Published

2026-09-14

Updated

2026-09-14

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.23

Description A use after free issue exists in the MP4Box component within the gf sg script load() function of the scenegraph/vrml tools.c file. This flaw allows a remote attacker to trigger the condition through specific manipulation. Use after free is a memory corruption flaw where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Upgrade to version abi-16.23.

Exploitability

Exploit

Fix

Impacts

Researchers

Ech06

Vendors

Affected products

Weakness enumeration

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-416: Use After Free