CVE-2026-92473 | GPAC 26.08-DEV BIFS commands.c gf_sg_command_del use after free (Issue 3830)

September 16, 2026 Yanac

A vulnerability marked as problematic has been reported in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free.

This vulnerability is documented as CVE-2026-92473. The attack needs to be performed locally. Additionally, an exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More