CVE-2021-21843

CVE-2021-21843 affects GPAC Project on Advanced Content library 1.0.1 (MPEG-4 decoding). A 32‑bit integer overflow in the integer handling during decoding (after validating range counts) can cause heap-based buffer overflow and memory corruption. An attacker can entice a user to open a crafted MP...

CVE-2021-21843

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that...

CVE-2021-21843

Removed by vendor...

CVE-2021-21846

The CVE-2021-21846 issue affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A specially crafted MPEG-4 input in the stsz decoder triggers an unchecked arithmetic path that can overflow and lead to a heap-based buffer overflow, causing memory...

CVE-2021-21846

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21846

Removed by vendor...

CVE-2021-21845

GPAC Project on Advanced Content library (GPAC) version 1.0.1 contains multiple CVE-2021-21845 family integer overflow flaws in MPEG-4 decoding. Specifically, the issue is triggered in the stsc decoder (and related atoms/FOURCC paths) where unchecked arithmetic can overflow and allocate/offset me...

CVE-2021-21845

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21845

Removed by vendor...

CVE-2021-21847

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stts” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...

CVE-2021-21847

CVE-2021-21847 affects the GPAC Project on Advanced Content library (version 1.0.1) and is due to an unchecked arithmetic path in the MPEG-4 decoding for the MPEG-4 atom/parsing, specifically the stts decoder, leading to an integer overflow and a heap-based buffer overflow that causes memory corr...

CVE-2021-21847

Removed by vendor...

CVE-2021-21851

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “csgp” decoder sample group description indices can cause an integer overflow due to unchecked arithmeti...

CVE-2021-21851

Removed by vendor...

CVE-2021-21851

CVE-2021-21851 affects the GPAC Project on Advanced Content library (GPAC) v1.0.1, specifically the MPEG-4 decoding path. A crafted MPEG-4 input in the csgp decoder sample group description indices triggers unchecked arithmetic, causing a heap-based buffer overflow and memory corruption. Impact i...

GPAC Buffer Overflow Vulnerability (CNVD-2021-101188)

GPAC is an open source multimedia framework. a buffer overflow vulnerability exists in GPAC Project Advanced Content, which stems from the product's MPEG-4 failure to check the validity of arithmetic results. An attacker could cause memory corruption through this vulnerability...

GPAC Project on Advanced Content integer overflow vulnerability

GPAC Project on Advanced Content is an open source cross-platform library that implements the MPEG-4 system standard and provides tools for media playback, vector graphics, and 3D rendering.The MPEG-4 decoding feature of GPAC Project on Advanced Content library 1.0.1 suffers from an integer...

CVE-2021-21852

GPAC Project on Advanced Content (GPAC) library v1.0.1 contains multiple exploitable integer overflow flaws in the MPEG-4 decoding path, specifically a heap-based buffer overflow triggered by unchecked arithmetic in the stss decoder. This can lead to memory corruption when a user opens a crafted ...

PT-2021-6599 · Unknown +1 · Gpac Project On Advanced Content Library +1

Name of the Vulnerable Software and Affected Versions: GPAC Project on Advanced Content library version 1.0.1 Description: The issue is related to the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library. A specially crafted MPEG-4 input at the "stss" decoder can cause an...

CVE-2021-21845: Integer Overflow to Buffer Overflow

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsc” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffe...