PT-2026-91734 · Gpac · Gpac

·

CVE-2026-90825

·

Published

2026-09-14

·

Updated

2026-09-15

CVSS v3.1

3.3

Low

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions GPAC version 26.07.0
Description A use after free issue exists in the MP4Box component within the gf node unregister() function of the scenegraph/base scenegraph.c file. This condition occurs when the function attempts to access memory that has already been freed. Exploitation requires local access to the system.
Recommendations Update GPAC version 26.07.0 to version abi-16.23.

Exploit

Fix

Use After Free

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-90825

Affected Products

Gpac