Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Tank0123

#17453of 53,624
15.3Total CVSS
Vulnerabilities · 2
Medium
1
Critical
1
PT-2021-21588
5.5
2021-08-04
Unknown · Atomicparsley · CVE-2021-37231
**Name of the Vulnerable Software and Affected Versions** Atomicparsley version 20210124.204813.840499f **Description** A stack-buffer-overflow issue occurs while parsing a crafted mp4 file due to a missing boundary check in the `APar readX()` function in `src/util.cpp`. **Recommendations** For Atomicparsley version 20210124.204813.840499f, as a temporary workaround, consider disabling the `APar readX()` function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
PT-2021-21589
9.8
2021-08-04
Unknown · Atomicparsley · CVE-2021-37232
**Name of the Vulnerable Software and Affected Versions** Atomicparsley version 20210124.204813.840499f **Description** A stack overflow issue occurs due to the lack of buffer size checking for `uint32 buffer` while reading more bytes in the `APar read64()` function located in `src/util.cpp`. This issue is related to the `APar read64()` function. **Recommendations** For Atomicparsley version 20210124.204813.840499f, consider disabling the `APar read64()` function as a temporary workaround until a patch is available. Restrict access to the `src/util.cpp` module to minimize the risk of exploitation. Avoid using the `uint32 buffer` variable in the affected function until the issue is resolved.