CVE-2026-90791 | GPAC up to f1219cde MP4Box base_scenegraph.c gf_node_unregister use after free (Issue 3801)

September 13, 2026 Yanac

A vulnerability described as critical has been identified in GPAC up to f1219cde. This vulnerability affects the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. The manipulation results in use after free.

This vulnerability is identified as CVE-2026-90791. The attack can be executed remotely. Additionally, an exploit exists.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More