CVE-2021-36417

Опубликовано: 12 янв. 2022

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.

Ссылки

https://github.com/gpac/gpac/issues/1846
Exploit
Issue Tracking
Third Party Advisory
https://www.debian.org/security/2023/dsa-5411
https://github.com/gpac/gpac/issues/1846
Exploit
Issue Tracking
Third Party Advisory
https://www.debian.org/security/2023/dsa-5411

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00214

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVE-2021-36417

CVSS3: 7.8

ubuntu

около 4 лет назад

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.

CVE-2021-36417

CVSS3: 7.8

debian

около 4 лет назад

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in th ...

GHSA-r22c-45h9-6v6v

CVSS3: 7.8

github

около 4 лет назад

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.

EPSS

Процентиль: 44%

0.00214

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-787