CVE-2024-6064 | GPAC 2.5-DEV-rev228-g11067ea92-master MP4Box loader_xmt.c xmt_node_end use after free (Issue 2874)

A vulnerability was found in GPAC 2.5-DEV-rev228-g11067ea92-master. It has been declared as problematic. This vulnerability affects the function xmt_node_end of the file src/scene_manager/loader_xmt.c of the component MP4Box. The manipulation leads to use after free.

This vulnerability was named CVE-2024-6064. Local access is required to approach this attack. Furthermore, there is an exploit available.

It is recommended to apply a patch to fix this issue.