CVE-2026-92472

A vulnerability was determined in GPAC 26.08-DEV. The affected element is the function gf_node_deactivate_ex of the file src/scenegraph/base_scenegraph.c of the component MP4Box. Executing a manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version abi-16.24 is sufficient to fix this issue. This patch is called e34f4ba349d55cd1849f0bcf4cf46552732e2db7. The affected component should be upgraded. This issue is distinct from CVE-2026-90827.

• CWE-119
• CWE-416

• https://github.com/gpac/gpac/
• https://github.com/gpac/gpac/commit/e34f4ba349d55cd1849f0bcf4cf46552732e2db7
• https://github.com/gpac/gpac/issues/3831
• https://github.com/gpac/gpac/releases/tag/abi-16.24
• https://github.com/user-attachments/files/30635912/poc_12.zip
• https://vuldb.com/cve/CVE-2026-92472
• https://vuldb.com/submit/941003
• https://vuldb.com/vuln/405731
• https://vuldb.com/vuln/405731/cti

Published

Sep 16, 2026

Last Modified

Sep 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92465Improper Neutralization of Special Elements used in an SQL C…7.6
• CVE-2026-92466zlt2000 microservices-platform through 6.0.0 contains a miss…8.8
• CVE-2026-92467zlt2000 microservices-platform through 6.0.0 contains an unv…8.3
• CVE-2026-92468zlt2000 microservices-platform through 6.0.0 contains an aut…6.5
• CVE-2026-92469zlt2000 microservices-platform through 6.0.0 contains an aut…8.1
• CVE-2026-9247Insufficient logging in the entry export feature in Devoluti…2.4
• CVE-2026-92473A vulnerability was identified in GPAC 26.08-DEV. The impact…3.3
• CVE-2026-92474A security flaw has been discovered in GPAC 26.08-DEV. This …3.3
• CVE-2026-92475A weakness has been identified in GPAC 26.08-DEV. This impac…5.3
• CVE-2026-92476In the Linux kernel, the following vulnerability has been re…
• CVE-2026-92477In the Linux kernel, the following vulnerability has been re…
• CVE-2026-92478In the Linux kernel, the following vulnerability has been re…