CVE-2021-40570

Source

https://nvd.nist.gov/vuln/detail/CVE-2021-40570

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-40570.json

Related

• DSA-5411-1

Published

2022-01-13T18:15:08Z

Modified

2023-11-29T09:02:18.487886Z

Details

The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the avccomputepoc function in av_parsers.c, which allows attackers to cause a denial of service, even code execution and escalation of privileges.

References

• https://www.debian.org/security/2023/dsa-5411
• https://github.com/gpac/gpac/issues/1899
• https://github.com/gpac/gpac/commit/04dbf08bff4d61948bab80c3f9096ecc60c7f302