CVE-2026-92474

A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline_get_proto_lib of the file src/compositor/mpeg4_inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. Upgrading to version abi-16.24 mitigates this issue. The patch is identified as e34f4ba349d55cd1849f0bcf4cf46552732e2db7. Upgrading the affected component is recommended.

• CWE-119
• CWE-416

• https://github.com/gpac/gpac/
• https://github.com/gpac/gpac/commit/e34f4ba349d55cd1849f0bcf4cf46552732e2db7
• https://github.com/gpac/gpac/issues/3829
• https://github.com/gpac/gpac/releases/tag/abi-16.24
• https://github.com/user-attachments/files/30635900/poc_01.zip
• https://vuldb.com/cve/CVE-2026-92474
• https://vuldb.com/submit/941005
• https://vuldb.com/vuln/405733
• https://vuldb.com/vuln/405733/cti

Published

Sep 16, 2026

Last Modified

Sep 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-92467zlt2000 microservices-platform through 6.0.0 contains an unv…8.3
• CVE-2026-92468zlt2000 microservices-platform through 6.0.0 contains an aut…6.5
• CVE-2026-92469zlt2000 microservices-platform through 6.0.0 contains an aut…8.1
• CVE-2026-9247Insufficient logging in the entry export feature in Devoluti…2.4
• CVE-2026-92472A vulnerability was determined in GPAC 26.08-DEV. The affect…3.3
• CVE-2026-92473A vulnerability was identified in GPAC 26.08-DEV. The impact…3.3
• CVE-2026-92475A weakness has been identified in GPAC 26.08-DEV. This impac…5.3
• CVE-2026-92476In the Linux kernel, the following vulnerability has been re…
• CVE-2026-92477In the Linux kernel, the following vulnerability has been re…
• CVE-2026-92478In the Linux kernel, the following vulnerability has been re…
• CVE-2026-92479In the Linux kernel, the following vulnerability has been re…
• CVE-2026-9248Authorization bypass in the entry duplication feature in Dev…2.6