Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101190
HistoryAug 18, 2021 - 12:00 a.m.

GPAC input validation error vulnerability

2021-08-1800:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

0.003 Low

EPSS

Percentile

67.8%

GPAC is an open source multimedia framework. a security vulnerability exists in the MPEG-4 decoding feature of GPAC on Advanced Content library v1.0.1. An attacker could exploit the vulnerability to cause incorrect memory allocation via a carefully constructed MPEG-4 input, which could lead to a heap buffer overflow and result in memory corruption.

CPENameOperatorVersion
gpac gpaceq1.0.1

0.003 Low

EPSS

Percentile

67.8%