CVE-2026-90578 | GPAC up to f1219cde MP4Box utils/list.c gf_list_count use after free (Issue 3817)

September 12, 2026 Yanac

A vulnerability was found in GPAC up to f1219cde and classified as problematic. Affected by this issue is the function gf_list_count of the file utils/list.c of the component MP4Box. Executing a manipulation can lead to use after free.

This vulnerability is tracked as CVE-2026-90578. The attack is restricted to local execution. Moreover, an exploit is present.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More