CVE-2026-90825 | GPAC 26.07.0 MP4Box base_scenegraph.c gf_node_unregister use after free (Issue 3805)

September 13, 2026 Yanac

A vulnerability classified as problematic was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. The manipulation results in use after free.

This vulnerability is identified as CVE-2026-90825. The attack is only possible with local access. Additionally, an exploit exists.

Upgrading the affected component is advised.VulDB Recent EntriesRead More