[SECURITY] [DSA 4966-1] gpac security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4966-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 31, 2021 https://www.debian.org/security/faq -...

CVE-2021-21858

The CVE-2021-21858 entry refers to GPAC Project on Advanced Content library (GPAC) 1.0.1, where multiple exploitable integer overflow vulnerabilities occur in the MPEG-4 decoding code. The root cause is unchecked addition arithmetic that can trigger heap-based buffer overflows, leading to memory ...

CVE-2021-21858

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflo...