Lucene search
Veracode Vulnerability DatabaseVERACODE:31930HistorySep 02, 2021 - 6:40 p.m.
Denial Of Service (DoS)
2021-09-0218:40:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.002 Low
EPSS
Percentile
56.3%
gpac:sid is vulnerable to denial of service. Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| gpac:bullseye | eq | 0.7.1+dfsg1-4 | |
| gpac:sid | eq | 1.0.1+dfsg1-3 | |
| gpac:bullseye | eq | 0.7.1+dfsg1-4 | |
| gpac:sid | eq | 1.0.1+dfsg1-3 |
Related
osv
osv
CVE-2021-21854
2021-08-18 13:15:07
gpac - security update
2021-08-31 00:00:00
cnvd
cnvd
GPAC Buffer Overflow Vulnerability (CNVD-2021-101187)
2021-08-18 00:00:00
prion
prion
Integer overflow
2021-08-18 13:15:00
cve
cve
CVE-2021-21854
2021-08-18 13:15:07
nvd
nvd
CVE-2021-21854
2021-08-18 13:15:07
cvelist
cvelist
CVE-2021-21854
2021-08-18 12:47:52
ubuntucve
ubuntucve
CVE-2021-21854
2021-08-18 00:00:00
debiancve
debiancve
CVE-2021-21854
2021-08-18 13:15:07
talos
talos
debian
debian
[SECURITY] [DSA 4966-1] gpac security update
2021-08-31 21:07:40
mageia
mageia
Updated gpac packages fix security vulnerability
2021-09-23 07:49:29
nessus
nessus
Debian DSA-4966-1 : gpac - security update
2021-09-01 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2021-0431)
2022-01-28 00:00:00
Debian: Security Advisory (DSA-4966-1)
2021-09-02 00:00:00