CVE-2021-44926 — NULL Pointer Dereference in Gpac

CWE-476 — NULL Pointer Dereference4 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 66.47%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gpac Debian Gpac

Timeline

PublishedDec 21

Latest updateDec 22

Description

A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node_get_tag function, which causes a segmentation fault and application crash.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶NVDgpac/gpac1.1.0

▶debiandebian/gpac

Patches

Patch: github.com ↗Patch: github.com ↗

🔴Vulnerability Details

GHSA

GHSA-jxm5-5ch5-jmxc: A null pointer dereference vulnerability exists in the gpac in the gf_node_get_tag function, which causes a segmentation fault and application crash↗2021-12-22

▶

OSV

CVE-2021-44926: A null pointer dereference vulnerability exists in gpac 1↗2021-12-21

▶

📋Vendor Advisories

Debian

CVE-2021-44926: gpac - A null pointer dereference vulnerability exists in gpac 1.1.0-DEV in the gf_node...↗2021

▶