CVE-2021-41458

CVE-2021-41458 affects GPAC MP4Box v1.1.0. Root cause is a stack buffer overflow at src/utils/error.c:1769, leading to a denial of service. Impact is stated as availability loss (Partial/High in some metrics; local or network vectors per sources). Remediation: upgrade GPAC to a version addressed ...

CVE-2021-41456

The vulnerability CVE-2021-41456 affects GPAC’s MP4Box (v1.0.1). The issue is a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1004 triggered by the szXmlTo parameter, leading to a denial of service. Connected references corroborate the GPAC context and CVE listing; Debi...

CVE-2021-41459

GPAC MP4Box (v1.0.1) contains a stack buffer overflow in nhmldmx_send_sample() at src/filters/dmx_nhml.c:1008 (szXmlFrom) leading to DoS. The issue is documented as CVE-2021-41459. Debian/DSA-5411 notes the fixed version for bullseye is gpac 1.0.1+dfsg1-4+deb11u2, indicating a package upgrade as ...

CVE-2021-41457

CVE-2021-41457 affects GPAC MP4Box 1.1.0 with a stack buffer overflow in nhmldmx_init_parsing (src/filters/dmx_nhml.c) that leads to denial of service. Multiple connected sources confirm GPAC/MP4Box exposure and provide remediation guidance. Debian advisory notes fixed delivery in GPAC 1.0.1+dfsg...