PT-2026-91046

🚨 CVE-2026-90683 A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf node unregister of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in reachable assertion. Attacking locally is a requirement. The exploit is now publ...

OSV-2026-923 Heap-use-after-free in gf_node_unregister

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523799837 Crash type: Heap-use-after-free READ 8 Crash state: gfnodeunregister BMParseCommand gfbifsflushcommandlist...

PT-2026-52659

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523799837 Crash type: Heap-use-after-free READ 8 Crash state: gf node unregister BM ParseCommand gf bifs flush command list...

PT-2026-51469

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=523017646 Crash type: Heap-use-after-free READ 8 Crash state: gf node unregister BD DecSceneReplace BM SceneReplace...

PT-2022-12611

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description A NULL pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...

PT-2022-12613

Name of the Vulnerable Software and Affected Versions GPAC version 1.1.0 Description An untrusted pointer dereference issue exists via the function gf node unregister at scenegraph/base scenegraph.c, which can lead to a Denial of Service DoS. Recommendations For GPAC version 1.1.0, as a temporary...