EPSS
Percentile
37.9%
gpac is vulnerable to information disclosure. An attacker is able to exploit the vulnerability by reading memory via a crafted file in the MP4Box command via the gf_hinter_track_new function.
gf_hinter_track_new
github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65
github.com/gpac/gpac/issues/1737
security-tracker.debian.org/tracker/CVE-2021-31261