CVE-2026-90687 | GPAC up to f1219cde MP4Box base_scenegraph.c gf_node_changed_internal use after free (Issue 3800)

September 13, 2026 Yanac

A vulnerability was found in GPAC up to f1219cde. It has been classified as critical. This vulnerability affects the function gf_node_changed_internal of the file scenegraph/base_scenegraph.c of the component MP4Box. This manipulation causes use after free.

The identification of this vulnerability is CVE-2026-90687. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More