Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-82985
HistoryAug 26, 2021 - 12:00 a.m.

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2021-82985)

2021-08-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
gpac project
advanced content
integer overflow
mpeg-4
decoding functionality
vulnerability
heap buffer overflow
memory corruption

EPSS

0.002

Percentile

58.6%

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering. an integer overflow vulnerability exists in the MPEG-4 decoding functionality in GPAC Project on Advanced Content version 1.0.1. An attacker could exploit the vulnerability via specially crafted MPEG-4 input to cause a heap buffer overflow, which could lead to memory corruption.