Beveiligingsadvies

CVE-2026-90827

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-14 21:45:09

Laatst bijgewerkt 2026-09-15 13:34:19

Toegewezen door VulDB

CVSS-score 4.8

Status PUBLISHED

Beschrijving

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version abi-16.23 is able to mitigate this issue. The name of the patch is 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.

← Alle CVE's bekijken Bekijk op cve.org ↗