CVE-2021-29279

There is a integer overflow in function filtercore/filterprops.c:gfpropsassignvalue in GPAC 1.0.1. In which, the arg const GFPropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gfpropsassign_value failed.

References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type

GIT

Repo

https://github.com/gpac/gpac

Events

Introduced

d8538e8ae946b32d99c6b2c57cbb327146e9cd9d

Last affected

d8538e8ae946b32d99c6b2c57cbb327146e9cd9d

Fixed

da69ad1f970a7e17c865eaec9af98cc84df10d5b

Database specific

{
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "1.0.1"
        },
        {
            "last_affected": "1.0.1"
        }
    ]
}

Affected versions

1.*

1.0.1

v1.*

v1.0.1

Database specific

vanir_signatures_modified

"2026-07-08T20:04:17Z"

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29279.json"

vanir_signatures

[
    {
        "id": "CVE-2021-29279-688a941d",
        "digest": {
            "function_hash": "271809893264534884931660195218224896488",
            "length": 4986.0
        },
        "signature_version": "v1",
        "signature_type": "Function",
        "source": "https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b",
        "deprecated": false,
        "target": {
            "function": "flac_dmx_process",
            "file": "src/filters/reframe_flac.c"
        }
    },
    {
        "id": "CVE-2021-29279-8515935a",
        "digest": {
            "line_hashes": [
                "102029437854238077049081131219035328767",
                "1758822345310994078902333647147355295",
                "91375987480369385241196899295650106496",
                "164621250167976074906983121855801251933",
                "173713928589759872021528131545224180852",
                "120156287496062208041479094701390957082",
                "134773658905465572514737648898400473062",
                "67876114723218513615781741177926374455",
                "211218421710624493902262592900065165246",
                "171764359295326514391450423514496630009",
                "231355731579607298891416484118488240950",
                "152456470730324089017527564619705188047",
                "225970606774595338019741053708735811980",
                "59026396062773415428220475118579893939"
            ],
            "threshold": 0.9
        },
        "signature_version": "v1",
        "signature_type": "Line",
        "source": "https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b",
        "deprecated": false,
        "target": {
            "file": "src/filters/reframe_flac.c"
        }
    }
]