LOWVulnerability
CVE-2026-90613
A security flaw has been discovered in GPAC up to f1219cde. Affected by this vulnerability is the function stbl_GetSampleInfos of the file isomedia/stbl_read.c of the component MP4Box. The manipulation results in reachable assertion. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. Upgrading to version abi-16.23 addresses this issue. The patch is identified as 49dee5cad329cfed310c1682703df7daa47df31a. It is advisable to upgrade the affected component.
Properties
- severity
- LOW
- score
- 3.3
- cve_id
- CVE-2026-90613
- signal_observed_at
- 2026-09-23T04:35:40+00:00
- vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
- published_at
- 2026-09-14T02:17:15.690
- last_modified
- 2026-09-16T15:18:34.507
Related Entities (2)
DESCRIBED_BY (1)
→[Source]NVD
HAS_WEAKNESS (1)
→[Weakness]Reachable Assertion
Explore deeper with Ninja Signal's threat intelligence graph