CVE-2026-108539

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

CVE-2026-108539 GPAC MP4Box filter_queue.c gf_fq_pop use after free

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

CVE-2026-108539

A use after free vulnerability exists in GPAC up to version 26.07.0 . The flaw is located within the MP4Box component, specifically affecting the gf_fq_pop function in the filter_core/filter_queue.c file. An attacker may initiate this attack remotely via specific manipulation. Public exploits for...

EUVD-2026-96732

A vulnerability was detected in GPAC up to 26.07.0. This affects the function gffqpop of the file filtercore/filterqueue.c of the component MP4Box. Performing a manipulation results in use after free. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was...

CVE-2026-108538

A use after free vulnerability exists in GPAC versions up to 26.07.0 . The flaw is located within the gf_mx_v function of the utils/os_thread.c file in the MP4Box component. This vulnerability can be triggered via a remote attack . While a public exploit has been disclosed and may be used, the ve...

The vulnerability of the gf_isom_nalu_sample_rewrite() function in the src/isomedia/avc_ext.c file of the MP4Box component of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomnalusamplerewrite function in the src/isomedia/avcext.c file of the MP4Box component of the GPAC multimedia platform is related to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause ...

The vulnerability of the sgpd_del_entry() function in the src/isomedia/box_code_base.c file of the MP4Box component of the GPAC multimedia platform allows a hacker to trigger a service failure.

The vulnerability of the sgpddelentry function in the src/isomedia/boxcodebase.c file of the MP4Box component of the GPAC multimedia platform is related to the occurrence of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a...

Linux Distros Unpatched Vulnerability : CVE-2026-92472

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the...

CVE-2026-92472

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

EUVD-2026-80994

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

CVE-2026-92472

A use-after-free vulnerability in GPAC 26.08-DEV , specifically in the function gf_node_deactivate_ex within src/scenegraph/base_scenegraph.c of the MP4Box component, can be triggered locally to impact availability (low impact, no confidentiality or integrity loss). A proof-of-concept exploit has...

CVE-2026-92472 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

CVE-2026-92472 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

CVE-2026-92472 GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use after free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

PT-2026-93908

Name of the Vulnerable Software and Affected Versions GPAC version 26.08-DEV Description A use after free issue exists in the MP4Box component within the gf node deactivate ex function located in the src/scenegraph/base scenegraph.c file. This flaw allows a local attacker to execute a manipulatio...

CVE-2026-92472: Use After Free

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gfnodedeactivateex of the file src/scenegraph/basescenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicl...

Linux Distros Unpatched Vulnerability : CVE-2026-90826

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was determined in GPAC 26.07.0. Affected by this issue is the function gfnodedel of the file scenegraph/basescenegraph.c of the component MP4Box...

Linux Distros Unpatched Vulnerability : CVE-2026-90827

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was identified in GPAC 26.07.0. This affects the function gfnodedeactivateex of the file scenegraph/basescenegraph.c of the component MP4Box. Su...

Linux Distros Unpatched Vulnerability : CVE-2026-90824

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been found in GPAC 26.07.0. Affected is the function gfsgdomeventbubble of the file src/scenegraph/domevents.c of the component MP4Box. The...

Linux Distros Unpatched Vulnerability : CVE-2026-90825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gfnodeunregister of the file scenegraph/basescenegraph.c of the...