Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-101546
HistoryOct 11, 2021 - 12:00 a.m.

MP4Box stack buffer overflow vulnerability

2021-10-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
mp4box
stack buffer overflow
nhmldmx_send_sample function
denial of service

EPSS

0.001

Percentile

50.8%

MP4Box is a multimedia packager available in GPAC. A stack buffer overflow vulnerability exists in the nhmldmx_send_sample() function in src/filters/dmx_nhml.c:1004 in MP4Box version 1.0.1. An attacker can exploit this vulnerability via the szXmlTo parameter to cause a denial of service.