4.3
CVSSv2

CVE-2021-31261

Published: 19/04/2021 Updated: 21/04/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

The gf_hinter_track_new function in GPAC 1.0.1 allows malicious users to read memory via a crafted file in the MP4Box command.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

Vendor Advisories

Debian Bug report logs - #987280 CVE-2021-31254 CVE-2021-31255 CVE-2021-31256 CVE-2021-31257 CVE-2021-31258 CVE-2021-31259 CVE-2021-31260 CVE-2021-31261 CVE-2021-31262 Package: gpac; Maintainer for gpac is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Source for gpac is src:gpac (PTS, buildd, popcon) Re ...
The gf_hinter_track_new function in GPAC 101 allows attackers to read memory via a crafted file in the MP4Box command ...