CVE-2021-45767 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Gpac

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer4 documents4 sources

Severity

5.5MEDIUMNVD

EPSS

0.1%

top 76.74%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Gpac Debian Gpac

Timeline

PublishedJan 14

Latest updateJan 15

Description

GPAC 1.1.0 was discovered to contain an invalid memory address dereference via the function lsr_read_id(). This vulnerability can lead to a Denial of Service (DoS).

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages3 packages

▶debiandebian/gpac< gpac 1.0.1+dfsg1-4+deb11u2 (bullseye)

▶Debiangpac/gpac< 1.0.1+dfsg1-4+deb11u2

▶NVDgpac/gpac1.1.0

🔴Vulnerability Details

GHSA

GHSA-qvcp-j6qr-88cc: GPAC 1↗2022-01-15

▶

OSV

CVE-2021-45767: GPAC 1↗2022-01-14

▶

📋Vendor Advisories

Debian

CVE-2021-45767: gpac - GPAC 1.1.0 was discovered to contain an invalid memory address dereference via t...↗2021

▶