CyberRota Analysis
AI-GeneratedA use-after-free vulnerability exists in the BIFS Handler of GPAC version 26.08-DEV, specifically within the gf_sg_command_del function. This flaw requires local exploitation, and while it has a low severity rating, the availability of public exploits necessitates prompt attention. Users and administrators of the affected GPAC version should prioritize upgrading to version abi-16.24 to mitigate potential risks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability was identified in GPAC 26.08-DEV. The impacted element is the function gf_sg_command_del of the file src/scenegraph/commands.c of the component BIFS Handler. The manipulation leads to use after free. The attack needs to be performed locally. The exploit is publicly available and might be used. Upgrading to version abi-16.24 is sufficient to resolve this issue. The identifier of the patch is e34f4ba349d55cd1849f0bcf4cf46552732e2db7. It is suggested to upgrade the affected component.