CVE-2026-91089 | GPAC up to f1219cde base_scenegraph.c gf_node_get_name_and_id use after free (Issue 3809)

September 14, 2026 Yanac

A vulnerability, which was classified as critical, was found in GPAC up to f1219cde. Impacted is the function gf_node_get_name_and_id of the file scenegraph/base_scenegraph.c. The manipulation results in use after free.

This vulnerability is known as CVE-2026-91089. It is possible to launch the attack remotely. Furthermore, an exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More