PT-2022-11254 · Gpac+1 · Gpac+1

5Hadowblad3 · Published 2018-12-19 · Updated 2023-05-27 · CVE-2021-40562

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Gpac versions through 1.0.1

Description A Segmentation fault caused by a floating point exception exists in Gpac, which causes a denial of service. This issue is related to the naludmx enqueue or dispatch function in reframe nalu.c when using mp4box.

Recommendations For Gpac versions through 1.0.1, consider disabling the naludmx enqueue or dispatch function in reframe nalu.c as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-697

Related Identifiers

ALT-PU-2018-2923

CVE-2021-40562

DSA-5411-1

Affected Products

Alt Linux

Gpac

References · 12

• https://github.com/gpac/gpac/commit/5dd71c7201a3e5cf40732d585bfb21c906c171d3 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-40562 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2021-40562 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-40562 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40562 · Security Note
• https://osv.dev/vulnerability/DSA-5411-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40562 · Vendor Advisory
• https://debian.org/security/2023/dsa-5411 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40562 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-40562 · Vendor Advisory
• https://github.com/gpac/gpac/issues/1901 · Note
• https://t.me/cibsecurity/35386 · Telegram Post