CVE-2026-2889 | CCExtractor up to 0.96.5 src/lib_ccx/mp4.c processmp4 use after free (Issue 2055)

A vulnerability identified as problematic has been detected in CCExtractor up to 0.96.5. Affected is the function processmp4 in the library src/lib_ccx/mp4.c. Performing a manipulation results in use after free.

This vulnerability is identified as CVE-2026-2889. The attack is only possible with local access. Additionally, an exploit exists.

You should upgrade the affected component.