CVE-2026-90827 | GPAC 26.07.0 MP4Box base_scenegraph.c gf_node_deactivate_ex use after free (Issue 3813)

A vulnerability, which was classified as problematic, was found in GPAC 26.07.0. This affects the function gf_node_deactivate_ex of the file scenegraph/base_scenegraph.c of the component MP4Box. Such manipulation leads to use after free.

This vulnerability is listed as CVE-2026-90827. The attack must be carried out locally. In addition, an exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More