CVE-2026-108538

A use after free vulnerability exists in GPAC versions up to 26.07.0 . The flaw is located within the gf_mx_v function of the utils/os_thread.c file in the MP4Box component. This vulnerability can be triggered via a remote attack . While a public exploit has been disclosed and may be used, the ve...

EUVD-2026-96731

A security vulnerability has been detected in GPAC up to 26.07.0. The impacted element is the function gfmxv of the file utils/osthread.c of the component MP4Box. Such manipulation leads to use after free. The attack can be launched remotely. The exploit has been disclosed publicly and may be use...