OSV-2026-798

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2026-798.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2026-798
Published
2026-05-22T00:20:52.141376Z
Modified
2026-05-23T14:30:03.115431Z
Summary
Heap-use-after-free in ReplaceDEFNode
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=515134929

Crash type: Heap-use-after-free READ 8
Crash state:
ReplaceDEFNode
gf_sg_reset
gf_sg_del
References

Affected packages

OSS-Fuzz / gpac

Package

Name
gpac
Purl
pkg:generic/gpac

Affected ranges

Type
GIT
Repo
https://github.com/gpac/gpac
Events
Introduced
d55ff26ed5b331771d28cc56be8fc57f04eddd5e
Fixed
40a851e86fc19b3da9cb92880fa747a1d30f0ac6
Fixed
4bf468922ac980cd35ce13eb36e02f2ec90f5142

Affected versions

abi-16.*
abi-16.12
abi-16.13
abi-16.14

Ecosystem specific 

{
    "severity": "HIGH"
}

Database specific

introduced_range 
"907fbb33591039a7d14492a9af3fac1baab2c5f6:b7607ad0e424919a4a30a97b5965d2b1703f50bd"
fixed_range 
"0a81f305388687d8afa61da5cf000abf7b0b3bb8:4bf468922ac980cd35ce13eb36e02f2ec90f5142"
source 
"https://github.com/google/oss-fuzz-vulns/blob/main/vulns/gpac/OSV-2026-798.yaml"