EUVD-2026-78157
GHSA-xxcj-23x9-7vhr
Severity by source
CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Local-only attack via crafted file processed by low-privilege user; impact is application crash only, no confidentiality or integrity loss.
Primary rating from Vendor (vuldb).
CVSS VectorVendor: vuldb
Lifecycle Timeline
4DescriptionCVE.org
A vulnerability was found in GPAC 26.07.0. Affected by this vulnerability is the function gf_node_unregister of the file scenegraph/base_scenegraph.c of the component MP4Box. The manipulation results in use after free. The attack is only possible with local access. The exploit has been made public and could be used. Upgrading to version abi-16.23 addresses this issue. The patch is identified as 9eb40df4448b88d6a6ce3454657c06f47eff0b24. Upgrading the affected component is advised.
AnalysisAI
Use-after-free in GPAC 26.07.0's MP4Box scenegraph engine allows a local low-privileged user to crash the application by processing a crafted scene file. The vulnerability exists in gf_node_unregister() within scenegraph/base_scenegraph.c, triggered when proto default field nodes (SFNODE/MFNODE typed) are not properly unregistered before scenegraph teardown, leaving dangling pointers subsequently dereferenced. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires local access to a system running GPAC 26.07.0 MP4Box and the ability to supply a crafted scene file (BT, XMT, or similar GPAC scene format) as input. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Real-world risk is very low despite the presence of a public PoC. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade GPAC to release abi-16.23 or later, which incorporates patch 9eb40df4448b88d6a6ce3454657c06f47eff0b24 (https://github.com/gpac/gpac/commit/9eb40df4448b88d6a6ce3454657c06f47eff0b24). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-119 – Buffer Overflow
View allSame technique Denial Of Service
View allShare
External POC / Exploit Code
Leaving vuln.today