CVE-2026-91087

Name of the Vulnerable Software and Affected Versions GPAC versions prior to abi-16.24

Description A flaw in the Compositor component allows a remote attacker to trigger a use after free condition. This occurs within the gf mo get od id() function located in the compositor/media object.c file. Use after free is a memory corruption issue where an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Recommendations Update to version abi-16.24.