CVE-2021-40607

2022-06-2813:15:09

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.9%

JSON

The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.

CPENameOperatorVersion
gpaceq0.6.0
gpaceq0.6.1
gpaceq0.8.0
gpaceq0.7.0
gpaceq0.5.2
gpaceq0.7.1
gpaceq0.9.0-preview
gpaceq1.0.0
gpaceq1.0.1
gpaceq0.9.0

Name	Operator	Version
gpac	eq	0.6.0
gpac	eq	0.6.1
gpac	eq	0.8.0
gpac	eq	0.7.0
gpac	eq	0.5.2
gpac	eq	0.7.1
gpac	eq	0.9.0-preview
gpac	eq	1.0.0
gpac	eq	1.0.1
gpac	eq	0.9.0

References

github.com/gpac/gpac/issues/1879