CVE-2026-90577 | GPAC up to f1219cde MP4Box base_scenegraph.c gf_node_get_field heap-based overflow (Issue 3816)

September 12, 2026 Yanac

A vulnerability has been found in GPAC up to f1219cde and classified as problematic. Affected by this vulnerability is the function gf_node_get_field of the file scenegraph/base_scenegraph.c of the component MP4Box. Performing a manipulation results in heap-based buffer overflow.

This vulnerability is identified as CVE-2026-90577. The attack is only possible with local access. Additionally, an exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More