4.3
CVSSv2

CVE-2021-36584

Published: 05/08/2021 Updated: 12/08/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.5 | Impact Score: 3.6 | Exploitability Score: 1.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

An issue exists in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

gpac gpac 1.0.1

Vendor Advisories

Debian Bug report logs - #991965 gpac: CVE-2021-36584 Package: src:gpac; Maintainer for src:gpac is Debian Multimedia Maintainers <debian-multimedia@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 6 Aug 2021 18:51:02 UTC Severity: important Tags: security, upstream Found in versi ...
An issue was discovered in GPAC 101 There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gppc, as demonstrated by MP4Box This can cause a denial of service (DOS) ...