8.8
High
CVE-2021-21846 Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project…
Description
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in “stsz” decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GPAC | Versions not published |
References
- talosintelligence.com talosintelligence.com
- DSA-4966 www.debian.org
- www.talosintelligence.com www.talosintelligence.com
Timeline
- Published
- Last modified
Other CVEs of GPAC
The 80 CVEs of GPAC →
CVE-2026-109827
A vulnerability has been found in GPAC up to 26.07.0
5.3
Medium
CVE-2026-108539
A vulnerability was detected in GPAC up to 26.07.0
5.3
Medium
CVE-2026-108538
A security vulnerability has been detected in GPAC up to 26.07.0
5.3
Medium
CVE-2026-103227
A weakness has been identified in GPAC up to 26.07.0
5.3
Medium