Security Advisory

CVE-2026-91087

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 06:45:12

Last updated 2026-09-15 13:53:41

Assigner VulDB

CVSS score 7.5

State PUBLISHED

Description

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gf_mo_get_od_id of the file compositor/media_object.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and may be used. Upgrading to version abi-16.24 is able to resolve this issue. This patch is called e34f4ba349d55cd1849f0bcf4cf46552732e2db7. Upgrading the affected component is advised.

← Browse all CVEs View on cve.org ↗