Security Advisory

CVE-2026-91089

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-09-15 07:15:09
Last updated 2026-09-15 17:36:04
Assigner VulDB
CVSS score 7.5
State PUBLISHED

Description

A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf_node_get_name_and_id of the file scenegraph/base_scenegraph.c. The manipulation results in use after free. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version abi-16.23 is recommended to address this issue. The patch is identified as 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.