PT-2026-91877

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gf mo get od id of the file compositor/media object.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and...

PT-2026-91889

A vulnerability was found in GPAC up to f1219cde. Impacted is the function gf node get name and id of the file scenegraph/base scenegraph.c. The manipulation results in use after free. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to...

CVE-2026-91087: Use After Free

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gfmogetodid of the file compositor/mediaobject.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and may ...

CVE-2026-91089: Use After Free

A vulnerability was found in GPAC up to f1219cde. Impacted is the function gfnodegetnameandid of the file scenegraph/basescenegraph.c. The manipulation results in use after free. It is possible to launch the attack remotely. The exploit has been made public and could be used. Upgrading to version...

CVE-2026-91091: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gfnodelistinsertchild of the file scenegraph/basescenegraph.c of the component Node Insertion. Such manipulation leads to memory corruption. The attack can be launched remotely. The exploit is publicly...

CVE-2026-91090: Stack-based Buffer Overflow

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gfnodeactivateex of the file scenegraph/basescenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly disclose...

PT-2026-91890

A vulnerability was determined in GPAC up to f1219cde. The affected element is the function gf node activate ex of the file scenegraph/base scenegraph.c. This manipulation causes stack-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been publicly...

PT-2026-91875

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmx process of the file filters/reframe mpgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

CVE-2026-91086: Heap-based Buffer Overflow

A security vulnerability has been detected in GPAC up to f1219cde. Affected by this issue is the function mpgviddmxprocess of the file filters/reframempgvid.c of the component MPEG Video Reframer. Such manipulation leads to heap-based buffer overflow. The attack can be executed remotely. The...

Linux Distros Unpatched Vulnerability : CVE-2026-90794

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. The affected element is the function gfsgscriptload of the file scenegraph/vrmltools.c of the component MP4Box...

Linux Distros Unpatched Vulnerability : CVE-2026-90687

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC up to f1219cde. This vulnerability affects the function gfnodechangedinternal of the file scenegraph/basescenegraph.c of...

Linux Distros Unpatched Vulnerability : CVE-2026-90791

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was detected in GPAC up to f1219cde. This vulnerability affects the function gfnodeunregister of the file scenegraph/basescenegraph.c of the...

Linux Distros Unpatched Vulnerability : CVE-2026-90609

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC up to f1219cde. The impacted element is an unknown function of the file scenegraph/vrmltools.c of the component MP4Box...

Linux Distros Unpatched Vulnerability : CVE-2026-90611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box...

PT-2026-91878

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gf url concatenate ex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capabl...

CVE-2026-91088: Heap-based Buffer Overflow

A vulnerability has been found in GPAC up to f1219cde. This issue affects the function gfurlconcatenateex of the file utils/url.c of the component URL Handler. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. Upgrading to version abi-16.23 is capable o...

Linux Distros Unpatched Vulnerability : CVE-2026-90610

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC up to f1219cde. This affects the function gfsvgattributescopy of the file scenegraph/svgattributes.c of the component MP4Box...

Linux Distros Unpatched Vulnerability : CVE-2026-90684

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gfnodegetfieldcount of the file scenegraph/basescenegraph.c of the...

PT-2026-91891

A vulnerability was identified in GPAC up to f1219cde. The impacted element is the function gf node list insert child of the file scenegraph/base scenegraph.c of the component Node Insertion. Such manipulation leads to memory corruption. The attack can be launched remotely. The exploit is publicl...

CVE-2026-90826

A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box. This manipulation causes out-of-bounds read. The attack is restricted to local execution. The exploit has been publicly disclosed and m...