CVE-2021-45762 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Gpac

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 78.16%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gpac Debian Gpac

Timeline

PublishedJan 14

Latest updateJan 15

Description

GPAC v1.1.0 was discovered to contain an invalid memory address dereference via the function gf_sg_vrml_mf_reset(). This vulnerability allows attackers to cause a Denial of Service (DoS).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/gpac< gpac 1.0.1+dfsg1-4+deb11u2 (bullseye)

▶Debiangpac/gpac< 1.0.1+dfsg1-4+deb11u2

▶NVDgpac/gpac1.1.0

🔴Vulnerability Details

GHSA

GHSA-3f56-hcw5-g566: GPAC v1↗2022-01-15

▶

OSV

CVE-2021-45762: GPAC v1↗2022-01-14

▶

📋Vendor Advisories

Debian

CVE-2021-45762: gpac - GPAC v1.1.0 was discovered to contain an invalid memory address dereference via ...↗2021

▶