Lucene search
GoogleOSV:CVE-2021-21860HistoryAug 16, 2021 - 8:15 p.m.
CVE-2021-21860
2021-08-1620:15:48
Google
osv.dev
7
cve-2021-21860
gpac project
mpeg-4
integer truncation
buffer overflow
memory corruption
fourcc code
video vulnerability
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an improper memory allocation resulting in a heap-based buffer overflow that causes memory corruption. The FOURCC code, ‘trik’, is parsed by the function within the library. An attacker can convince a user to open a video to trigger this vulnerability.
Related
prion
prion
Heap overflow
2021-08-16 20:15:00
debiancve
debiancve
CVE-2021-21860
2021-08-16 20:15:48
cnvd
cnvd
GPAC Project on Advanced Content integer overflow vulnerability
2021-08-18 00:00:00
ubuntucve
ubuntucve
CVE-2021-21860
2021-08-16 00:00:00
nvd
nvd
CVE-2021-21860
2021-08-16 20:15:48
veracode
veracode
Denial Of Service
2021-09-02 18:31:51
cvelist
cvelist
CVE-2021-21860
2021-08-16 19:07:30
cve
cve
CVE-2021-21860
2021-08-16 20:15:48
talos
talos
mageia
mageia
Updated gpac packages fix security vulnerability
2021-09-23 07:49:29
nessus
nessus
Debian DSA-4966-1 : gpac - security update
2021-09-01 00:00:00
GLSA-202408-21 : GPAC: Multiple Vulnerabilities
2024-08-10 00:00:00
osv
osv
gpac - security update
2021-08-31 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0431)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-4966-1)
2021-09-02 00:00:00
debian
debian
[SECURITY] [DSA 4966-1] gpac security update
2021-08-31 21:07:40
gentoo
gentoo
GPAC: Multiple Vulnerabilities
2024-08-10 00:00:00