CVE-2021-36414

Опубликовано: 10 янв. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.

Ссылки

https://github.com/gpac/gpac/issues/1840
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.debian.org/security/2023/dsa-5411
https://github.com/gpac/gpac/issues/1840
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.debian.org/security/2023/dsa-5411

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 43%

0.00206

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-36414

CVSS3: 7.8

ubuntu

около 4 лет назад

A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.

CVE-2021-36414

CVSS3: 7.8

debian

около 4 лет назад

A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1. ...

GHSA-8g95-qfv7-r6w2

CVSS3: 7.8

github

около 4 лет назад

A heab-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via media.c, which allows attackers to cause a denial of service or execute arbitrary code via a crafted file.

EPSS

Процентиль: 43%

0.00206

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787