CVE-2021-32135

Published: 13 September 2021

The trak_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.

Priority

Medium

CVSS 3 base score: 5.5

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32135
• https://github.com/gpac/gpac/commit/b8f8b202d4fc23eb0ab4ce71ae96536ca6f5d3f8
• https://github.com/gpac/gpac/issues/1757
• NVD
• Launchpad
• Debian

Bugs