Lucene search

K
osvGoogleOSV:CVE-2021-30022
HistoryApr 19, 2021 - 8:15 p.m.

CVE-2021-30022

2021-04-1920:15:14
Google
osv.dev
1

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash.

7.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%