CVE-2026-90684 | GPAC up to f1219cde MP4Box base_scenegraph.c gf_node_get_field_count assertion (Issue 3824)

September 13, 2026 Yanac

A vulnerability, which was classified as problematic, was found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of the file scenegraph/base_scenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion.

This vulnerability is handled as CVE-2026-90684. It is possible to launch the attack on the local host. Additionally, an exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More