5.3
Medium
CVE-2026-90793 A vulnerability has been found in GPAC up to f1219cde
Description
A vulnerability has been found in GPAC up to f1219cde. Impacted is the function gf_node_get_name of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to use after free. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Upgrading to version abi-16.23 is recommended to address this issue. The name of the patch is 9eb40df4448b88d6a6ce3454657c06f47eff0b24. Upgrading the affected component is advised.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GPAC | Versions not published |
References
- VDB-403299 | GPAC MP4Box base_scenegraph.c gf_node_get_name use after free vuldb.com
- VDB-403299 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-90793 | CVE Analysis and Report vuldb.com
- Submit #914124 | GPAC GPAC (MP4Box) gpac f1219cde (master, 2026-07-25) Use After Free vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of GPAC
The 80 CVEs of GPAC →
CVE-2026-109827
A vulnerability has been found in GPAC up to 26.07.0
5.3
Medium
CVE-2026-108539
A vulnerability was detected in GPAC up to 26.07.0
5.3
Medium
CVE-2026-108538
A security vulnerability has been detected in GPAC up to 26.07.0
5.3
Medium
CVE-2026-103227
A weakness has been identified in GPAC up to 26.07.0
5.3
Medium