CVE-2021-21848

Removed by vendor...

CVE-2021-21848

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The library will actually reuse the parser for atoms with the “stsz” FOURCC code when parsing atoms that use the “stz2” FOURCC code and can cause a...

CVE-2021-21848

CVE-2021-21848 concerns the GPAC Project on Advanced Content library, version 1.0.1, where the MPEG-4 decoding path can overrun due to reusing the parser for atoms with the stsz code when parsing stz2 atoms. This integer overflow can lead to a heap-based buffer overflow and memory corruption. The...

CVE-2021-21849

Removed by vendor...

CVE-2021-21849

GPAC library (GPAC Project on Advanced Content), version 1.0.1, contains an exploitable integer overflow in MPEG‑4 decoding for atoms using tfra (and related FOURCCs), leading to a heap‑based buffer overflow and memory corruption. The flaw is triggered by specially crafted MPEG‑4 input and can be...

CVE-2021-21841

Removed by vendor...

CVE-2021-21841

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic...

CVE-2021-21841

GPAC Project on Advanced Content Library v1.0.1 contains an exploitable integer overflow in MPEG-4 decoding when processing certain atoms with sbgp (and related FOURCC codes). The root cause is unchecked arithmetic leading to a heap-based buffer overflow and memory corruption. This affects GPAC a...

CVE-2021-21842

Removed by vendor...

CVE-2021-21842

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic...

CVE-2021-21842

The CVE-2021-21842 issue affects the GPAC Project on Advanced Content library v1.0.1, where an exploitable integer overflow in the MPEG-4 decoding path (processing an atom with the 'ssix' FourCC) leads to a heap-based buffer overflow and memory corruption. Unchecked arithmetic during decoding all...

CVE-2021-21840

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process an atom using the “saio” FOURCC code cause an integer overflow due to unchecked arithmetic resulti...

CVE-2021-21840

Removed by vendor...

CVE-2021-21840

GPAC Project on Advanced Content (GPAC) library v1.0.1 contains a vulnerability in MPEG-4 decoding. A crafted MPEG-4 input targeting the saio FOURCC can trigger an integer overflow, leading to a heap-based buffer overflow and memory corruption. The issue is exploitable when a user opens a malicio...

CVE-2021-21836

CVE-2021-21836 concerns the GPAC Project on Advanced Content library (GPAC) v1.0.1. The vulnerability is a heap-based buffer overflow triggered by an exploitable integer overflow in the MPEG-4 decoding path when processing the ctts atom/FOURCC, due to unchecked arithmetic. This can lead to memory...

CVE-2021-21836

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input using the “ctts” FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based...

CVE-2021-21836

Removed by vendor...

CVE-2021-21834

GPAC Project on Advanced Content library v1.0.1 contains an exploitable integer overflow in the MPEG-4 decoding path (co64 atom) that leads to a heap-based buffer overflow and memory corruption. An attacker can convince a user to open a crafted MPEG-4 video to trigger this vulnerability. Public a...

CVE-2021-21835

An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when decoding the atom associated with the “csgp” FOURCC can cause an integer overflow due to unchecked arithmetic...

CVE-2021-21835

The CVE-2021-21835 issue affects the GPAC Project on Advanced Content library (GPAC) 1.0.1, specifically in the MPEG-4 decoding path. The vulnerability is an integer overflow in the atom decoded for the csgp FOURCC, caused by unchecked arithmetic, which leads to a heap-based buffer overflow and m...