4.3
CVSSv2

CVE-2021-31256

Published: 19/04/2021 Updated: 03/05/2022
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

Memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 1.0.1 allows malicious users to read memory via a crafted file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gpac gpac 1.0.1

Vendor Advisories

Debian Bug report logs - #987280 CVE-2021-31254 CVE-2021-31255 CVE-2021-31256 CVE-2021-31257 CVE-2021-31258 CVE-2021-31259 CVE-2021-31260 CVE-2021-31261 CVE-2021-31262 Package: gpac; Maintainer for gpac is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for gpac is src:gpac (PTS, buildd, popcon) Re ...
A memory leak in the stbl_GetSampleInfos function in MP4Box in GPAC 101 allows attackers to read memory via a crafted file ...