Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-90685

Опубликовано: 14 сент. 2026
Источник: nvd
CVSS3: 2.8
CVSS2: 1.7
EPSS Низкий

Описание

A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of the file laser/lsr_dec.c of the component MP4Box. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version abi-16.23 can resolve this issue. The identifier of the patch is afca1f1181668d85941d51ed1adf647807d5d975. The affected component should be upgraded.

EPSS

Процентиль: 1%
0.00111
Низкий

2.8 Low

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 2.8
ubuntu
3 дня назад

A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of the file laser/lsr_dec.c of the component MP4Box. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version abi-16.23 can resolve this issue. The identifier of the patch is afca1f1181668d85941d51ed1adf647807d5d975. The affected component should be upgraded.

CVSS3: 2.8
debian
3 дня назад

A vulnerability has been found in GPAC up to f1219cde. Affected by thi ...

CVSS3: 2.8
github
3 дня назад

A vulnerability has been found in GPAC up to f1219cde. Affected by this issue is the function lsr_exec_command_list of the file laser/lsr_dec.c of the component MP4Box. The manipulation leads to reachable assertion. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version abi-16.23 can resolve this issue. The identifier of the patch is afca1f1181668d85941d51ed1adf647807d5d975. The affected component should be upgraded.

EPSS

Процентиль: 1%
0.00111
Низкий

2.8 Low

CVSS3

1.7 Low

CVSS2

Дефекты

CWE-617
Уязвимость CVE-2026-90685