CVE-2026-91087

GPAC (up to commit f1219cde) contains a use-after-free vulnerability in the function gf_mo_get_od_id within the file compositor/media_object.c of the Compositor component. A remote attacker can trigger the flaw by crafting a malicious input, potentially leading to information disclosure, integrit...

CVE-2026-91087 GPAC Compositor media_object.c gf_mo_get_od_id use after free

A flaw has been found in GPAC up to f1219cde. This vulnerability affects the function gfmogetodid of the file compositor/mediaobject.c of the component Compositor. Executing a manipulation can lead to use after free. The attack may be performed from remote. The exploit has been published and may ...