[SECURITY] [DSA 4966-1] gpac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4966-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2021 https://www.debian.org/security/faq -...

CVE-2021-21855

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...

CVE-2021-21855

CVE-2021-21855 concerns the GPAC multimedia framework, specifically the MPEG-4 decoding path in library v1.0.1. The issue arises from unchecked addition arithmetic that can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. An attacker can exploit this by ...