Lucene search

K
osvGoogleOSV:CVE-2021-30020
HistoryApr 19, 2021 - 8:15 p.m.

CVE-2021-30020

2021-04-1920:15:14
Google
osv.dev
4

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%