CVE-2021-21836

CVE-2021-21836 concerns the GPAC Project on Advanced Content library (GPAC) v1.0.1. The vulnerability is a heap-based buffer overflow triggered by an exploitable integer overflow in the MPEG-4 decoding path when processing the ctts atom/FOURCC, due to unchecked arithmetic. This can lead to memory...

CVE-2021-21834

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom for the “co64” FOURCC can cause an integer overflow due to unchecked arithmetic resulting i...

CVE-2021-21835

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...

CVE-2021-21841: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic...

CVE-2021-21848: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The library will actually reuse the parser for atoms with the “stsz” FOURCC code when parsing atoms that use the “stz2” FOURCC code and can cause a...

PT-2021-6769

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. The library reuses the parser for...

PT-2021-6770

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input...

PT-2021-6765

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow when processing an...

PT-2021-6771

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input...

PT-2021-6764

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An integer overflow vulnerability exists within the MPEG-4 decoding functionality due to unchecked arithmetic, resulting in a heap-based buffer overflow that causes memory...

CVE-2021-21850: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the “trun” FOURCC code due to unchecked...

CVE-2021-21849: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the “tfra” FOURCC code due to unchecked...

CVE-2021-21842: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic...

CVE-2021-21840: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer overflow due to unchecked arithmetic resulti...

CVE-2021-21834: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom for the “co64” FOURCC can cause an integer overflow due to unchecked arithmetic resulting i...

CVE-2021-21835: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...

PT-2021-6575

Name of the Vulnerable Software and Affected Versions GPAC Project on Advanced Content library version 1.0.1 Description An integer overflow vulnerability exists within the MPEG-4 decoding functionality. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic,...

CVE-2021-21836: Integer Overflow to Buffer Overflow

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2022-03632)

GPAC Project Advanced Content is an implementation of the MPEG-4 system standard, written in ANSI C. An integer overflow vulnerability exists in GPAC Project on Advanced Content, which stems from an unchecked algorithm and can be exploited by remote attackers to cause a heap buffer overflow,...

GPAC Project on Advanced Content Integer Overflow Vulnerability (CNVD-2022-03633)

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.GPAC Project on Advanced Content is vulnerable to an integer overflow vulnerability that originates from an...