https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T11:42:26.602182+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-367953 EUVD-2026-367953 2026-10-05T11:42:26.680576+00:00 EUVD-2026-367953 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90684 fkie_cve-2026-90684 2026-10-05T11:42:26.680617+00:00

A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of the file scenegraph/base_scenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. It is possible to launch the attack on the local host. The exploit has been published and may be used. Upgrading to version abi-16.23 addresses this issue. This patch is called 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.

 https://cve.radiocsirt.org/vuln/ghsa-xcqp-688w-crp9 GHSA-xcqp-688w-crp9 2026-10-05T11:42:26.680653+00:00

A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of the file scenegraph/base_scenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. It is possible to launch the attack on the local host. The exploit has been published and may be used. Upgrading to version abi-16.23 addresses this issue. This patch is called 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-90684 UBUNTU-CVE-2026-90684 2026-10-05T11:42:26.680673+00:00

Affected: Ubuntu:Pro:14.04:LTS: gpac, Ubuntu:Pro:16.04:LTS: gpac, Ubuntu:Pro:18.04:LTS: gpac, Ubuntu:Pro:20.04:LTS: gpac, Ubuntu:Pro:22.04:LTS: gpac, Ubuntu:Pro:24.04:LTS: gpac

A flaw has been found in GPAC up to f1219cde. Affected by this vulnerability is the function gf_node_get_field_count of the file scenegraph/base_scenegraph.c of the component MP4Box. Executing a manipulation can lead to reachable assertion. It is possible to launch the attack on the local host. The exploit has been published and may be used. Upgrading to version abi-16.23 addresses this issue. This patch is called 49dee5cad329cfed310c1682703df7daa47df31a. You should upgrade the affected component.