CVE-2021-40575

The binary MP4Box in Gpac 1.0.1 has a null pointer dereference vulnerability in the mpgviddmx_process function in reframe_mpgvid.c, which allows attackers to cause a denial of service. This vulnerability is possibly due to an incomplete fix for CVE-2021-40566.
References
Link Resource
https://github.com/gpac/gpac/issues/1905 Exploit Issue Tracking Third Party Advisory
https://github.com/gpac/gpac/commit/5f2c2a16d30229b6241f02fa28e3d6b810d64858 Patch Third Party Advisory
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*

Information

Published : 2022-01-13 11:15

Updated : 2022-01-14 08:38


NVD link : CVE-2021-40575

Mitre link : CVE-2021-40575


JSON object : View

CWE
CWE-476

NULL Pointer Dereference

Advertisement

dedicated server usa

Products Affected

gpac

  • gpac