CVE-2026-90610 | GPAC up to f1219cde MP4Box svg_attributes.c gf_svg_attributes_copy buffer over-read (Issue 3819)

September 12, 2026 Yanac

A vulnerability was found in GPAC up to f1219cde. It has been classified as problematic. This affects the function gf_svg_attributes_copy of the file scenegraph/svg_attributes.c of the component MP4Box. Performing a manipulation results in buffer over-read.

This vulnerability is identified as CVE-2026-90610. The attack is only possible with local access. Additionally, an exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More