CVE-2026-90683 | GPAC up to f1219cde MP4Box base_scenegraph.c gf_node_unregister assertion (Issue 3823)

September 13, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in GPAC up to f1219cde. Affected is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. Performing a manipulation results in reachable assertion.

This vulnerability is known as CVE-2026-90683. Attacking locally is a requirement. Furthermore, an exploit is available.

It is advisable to upgrade the affected component.

This is not a duplicate of CVE-2021-46237 or CVE-2021-46234.VulDB Recent EntriesRead More