Lucene search
GoogleOSV:CVE-2021-21844HistoryAug 18, 2021 - 1:15 p.m.
CVE-2021-21844
2021-08-1813:15:07
Google
osv.dev
7
gpac project
mpeg-4
integer overflow
heap-based buffer overflow
memory corruption
video
vulnerability
exploit
arithmetic
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when encountering an atom using the “stco” FOURCC code, can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.
Related
debiancve
debiancve
CVE-2021-21844
2021-08-18 13:15:07
prion
prion
Integer overflow
2021-08-18 13:15:00
nvd
nvd
CVE-2021-21844
2021-08-18 13:15:07
cnvd
cnvd
ubuntucve
ubuntucve
CVE-2021-21844
2021-08-18 00:00:00
cve
cve
CVE-2021-21844
2021-08-18 13:15:07
veracode
veracode
Denial Of Service (DoS)
2021-09-02 18:49:04
cvelist
cvelist
CVE-2021-21844
2021-08-18 12:33:52
talos
talos
mageia
mageia
Updated gpac packages fix security vulnerability
2021-09-23 07:49:29
nessus
nessus
Debian DSA-4966-1 : gpac - security update
2021-09-01 00:00:00
GLSA-202408-21 : GPAC: Multiple Vulnerabilities
2024-08-10 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0431)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-4966-1)
2021-09-02 00:00:00
debian
debian
[SECURITY] [DSA 4966-1] gpac security update
2021-08-31 21:07:40
osv
osv
gpac - security update
2021-08-31 00:00:00
gentoo
gentoo
GPAC: Multiple Vulnerabilities
2024-08-10 00:00:00