CVE-2026-92474 | GPAC 26.08-DEV Proto Link mpeg4_inline.c gf_inline_get_proto_lib use after free (Issue 3829)

September 16, 2026 Yanac

A vulnerability described as problematic has been identified in GPAC 26.08-DEV. This affects the function gf_inline_get_proto_lib of the file src/compositor/mpeg4_inline.c of the component Proto Link Handler. The manipulation results in use after free.

This vulnerability is reported as CVE-2026-92474. The attack requires a local approach. Moreover, an exploit is present.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More