CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...

CVE-2021-45292

GPAC 1.0.1 has a vulnerability in gf_isom_hint_rtp_read that can cause a denial of service through a crafted MP4Box file, due to an invalid memory address dereference. This CVE is CVE-2021-45292. Remediation is to upgrade to a fixed GPAC release (e.g., Debian’s 1.0.1+dfsg1-4+deb11u2).

CVE-2021-45292

The gfisomhintrtpread function in GPAC 1.0.1 allows attackers to cause a denial of service Invalid memory address dereference via a crafted file in the MP4Box command...