CVE-2021-21852

Source

https://nvd.nist.gov/vuln/detail/CVE-2021-21852

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-21852.json

Related

• DSA-5411-1

Published

2021-08-18T13:15:07Z

Modified

2023-11-29T08:42:29.158573Z

Details

Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input at “stss” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.

References

• https://www.debian.org/security/2023/dsa-5411
• https://talosintelligence.com/vulnerability_reports/TALOS-2021-1297
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2021-1297