Security Advisory

CVE-2026-90827

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-14 21:45:09

Last updated 2026-09-15 13:34:19

Assigner VulDB

CVSS score 4.8

State PUBLISHED

Description

A vulnerability was identified in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack must be carried out locally. The exploit is publicly available and might be used. Upgrading to version abi-16.23 is able to mitigate this issue. The name of the patch is 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.

← Browse all CVEs View on cve.org ↗