CVE-2026-90609 | GPAC up to f1219cde MP4Box scenegraph/vrml_tools.c null pointer dereference (Issue 3818)

September 12, 2026 Yanac

A vulnerability was found in GPAC up to f1219cde and classified as problematic. The impacted element is an unknown function of the file scenegraph/vrml_tools.c of the component MP4Box. Such manipulation leads to null pointer dereference.

This vulnerability is referenced as CVE-2026-90609. The attack can only be performed from a local environment. Furthermore, an exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More