CVE-2021-30022

There is a integer overflow in mediatools/avparsers.c in the gfavcreadppsbsinternal in GPAC from 0.5.2 to 1.0.1. ppsid may be a negative number, so it will not return. However, avc-pps only has 255 unit, so there is an overflow, which results a crash...

CVE-2021-30022

GPAC vulnerability CVE-2021-30022 stems from an integer overflow in media_tools/av_parsers.c (gf_avc_read_pps_bs_internal). Affected GPAC versions range from 0.5.2 to 1.0.1; pps_id may be negative, while avc->pps has 255 units, causing a crash. Public disclosures in NVD/CNVD/OSV/NASL variants ...