CVE-2026-2889

A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/libccx/mp4.c. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 0.96.6...

CVE-2026-2889

A vulnerability was detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/libccx/mp4.c. Performing a manipulation results in use after free. The attack is only possible with local access. The exploit is now public and may be used. Upgrading to version 0.96.6...

CCExtractor Resource Management Error Vulnerability

CCExtractor is an open-source decompression software developed by CCExtractor Development. Versions of CCExtractor 0.96.5 and earlier contained a resource management vulnerability, which stemmed from the use of the processmp4 function, allowing for reuse after it was released...

PT-2026-21397

Name of the Vulnerable Software and Affected Versions CCExtractor versions up to 0.96.5 Description A use-after-free issue exists in the processmp4 function within the src/lib ccx/mp4.c library of CCExtractor. This issue is exploitable with local access. The exploit is publicly available...