CVE-2021-40563

Medium

Description

A Segmentation fault exists casued by null pointer dereference exists in Gpac through 1.0.1 via the naludmx_create_avc_decoder_config function in reframe_nalu.c when using mp4box, which causes a denial of service.

SeverityMedium

CVSS5.5

Exploit probability—

ProductGpac

PublishedJan 12, 2022

First seenJan 12, 2022

How to fix

Vendor advisories

debian.org/security/2023/dsa-5411

Affected products

Product	Affected versions	Fixed in
gpac gpac	v ≤ 1.0.1	—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.