CVE-2021-30022
19.04.2021, 20:15
There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash.Enginsight
| Vendor | Product | Version |
|---|---|---|
| gpac | gpac | 0.5.2 ≤ 𝑥 ≤ 1.0.1 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References