CVE-2026-90686 | GPAC up to f1219cde MP4Box loader_bt.c gf_bt_report memory corruption (Issue 3798)

September 13, 2026 Yanac

A vulnerability was found in GPAC up to f1219cde and classified as problematic. This affects the function gf_bt_report of the file scene_manager/loader_bt.c of the component MP4Box. The manipulation results in memory corruption.

This vulnerability was named CVE-2026-90686. The attack may be performed from remote. In addition, an exploit is available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More