CyberRota Analysis
AI-GeneratedA use-after-free vulnerability has been identified in the Proto Link Handler of GPAC 26.08-DEV, specifically within the gf_inline_get_proto_lib function. This flaw can be exploited locally, potentially leading to unauthorized access or manipulation of memory. Users and organizations utilizing this version of GPAC should prioritize upgrading to version abi-16.24 to mitigate the risk associated with this vulnerability.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A security flaw has been discovered in GPAC 26.08-DEV. This affects the function gf_inline_get_proto_lib of the file src/compositor/mpeg4_inline.c of the component Proto Link Handler. The manipulation results in use after free. The attack requires a local approach. The exploit has been released to the public and may be used for attacks. Upgrading to version abi-16.24 mitigates this issue. The patch is identified as e34f4ba349d55cd1849f0bcf4cf46552732e2db7. Upgrading the affected component is recommended.