CVE-2026-90612

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

UBUNTU-CVE-2026-90611

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

CVE-2026-90613 GPAC MP4Box stbl_read.c stbl_GetSampleInfos assertion

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...

CVE-2026-90613

GPAC (component MP4Box ) contains a reachable assertion vulnerability in the function stbl_GetSampleInfos within the file isomedia/stbl_read.c , affecting versions up to commit f1219cde. The attack requires a local position with low privileges and results in a low availability impact (denial of s...

EUVD-2026-77168

A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stblGetSampleInfos of the file isomedia/stblread.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit h...

CVE-2026-90612

A reachable assertion vulnerability exists in GPAC (up to commit f1219cde), specifically in the function gf_sm_dump_command_list within the file scene_manager/scene_dump.c of the MP4Box component. The flaw can be triggered locally with low privileges and low complexity, resulting in a denial of s...

EUVD-2026-77167

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90612 GPAC MP4Box scene_dump.c gf_sm_dump_command_list assertion

A vulnerability was identified in GPAC up to f1219cde. Affected is the function gfsmdumpcommandlist of the file scenemanager/scenedump.c of the component MP4Box. The manipulation leads to reachable assertion. The attack must be carried out locally. The exploit is publicly available and might be...

CVE-2026-90611 GPAC MP4Box loader_xmt.c xmt_parse_element assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

CVE-2026-90611 GPAC MP4Box loader_xmt.c xmt_parse_element assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

EUVD-2026-77166

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

CVE-2026-90611 GPAC MP4Box loader_xmt.c xmt_parse_element assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...

CVE-2026-90611

CVE-2026-90611 affects GPAC (up to commit f1219cde), specifically the xmt_parse_element function in scene_manager/loader_xmt.c of the MP4Box component. A crafted manipulation triggers a reachable assertion , leading to a crash with low availability impact. The attack vector is local , requires lo...

PT-2026-91051

A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr exec command list of the file laser/lsr dec.c of the component MP4Box. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been disclosed ...

CVE-2026-90786: Reachable Assertion

A vulnerability was determined in Dvidelabs flatcc up to 0.6.3. This impacts the function alignordermembers of the file src/compiler/semantics.c of the component Duplicate Symbol Handler. This manipulation causes reachable assertion. The attack can be initiated remotely. The exploit has been...

PT-2026-91050

A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf node get field count of the file scenegraph/base scenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. It is possible to launch the attack on the local host. T...

PT-2026-91046

🚨 CVE-2026-90683 A vulnerability was detected in GPAC up to f1219cde. Affected is the function gf node unregister of the file scenegraph/base scenegraph.c of the component MP4Box. Performing a manipulation results in reachable assertion. Attacking locally is a requirement. The exploit is now publ...

CVE-2026-90611: Reachable Assertion

A vulnerability was determined in GPAC up to f1219cde. This impacts the function xmtparseelement of the file scenemanager/loaderxmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. The attack is restricted to local execution. The exploit has been publicly...