Debian DSA-4966-1 : gpac - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-4966 advisory. Multiple security issues were discovered in the GPAC multimedia framework which could result in denial of service or the execution of arbitrary code. The oldstabl...

[SECURITY] [DSA 4966-1] gpac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4966-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2021 https://www.debian.org/security/faq -...

CVE-2021-21842

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic...

CVE-2021-21842

The CVE-2021-21842 issue affects the GPAC Project on Advanced Content library v1.0.1, where an exploitable integer overflow in the MPEG-4 decoding path (processing an atom with the 'ssix' FourCC) leads to a heap-based buffer overflow and memory corruption. Unchecked arithmetic during decoding all...