CVE-2026-90611 | GPAC up to f1219cde MP4Box loader_xmt.c xmt_parse_element assertion (Issue 3820)

September 12, 2026 Yanac

A vulnerability was found in GPAC up to f1219cde. It has been declared as problematic. This impacts the function xmt_parse_element of the file scene_manager/loader_xmt.c of the component MP4Box. Executing a manipulation can lead to reachable assertion.

This vulnerability is tracked as CVE-2026-90611. The attack is restricted to local execution. Moreover, an exploit is present.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More