Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-30020

Опубликовано: 19 апр. 2021
Источник: nvd
CVSS3: 5.5
CVSS2: 4.3
EPSS Низкий

Описание

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 50%
0.00265
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 5.5
ubuntu
почти 5 лет назад

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.

CVSS3: 5.5
debian
почти 5 лет назад

In the function gf_hevc_read_pps_bs_internal function in media_tools/a ...

github
больше 3 лет назад

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.

EPSS

Процентиль: 50%
0.00265
Низкий

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-787