CVE-2021-21857: Buffer Overflow
Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked addition arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21857?
CVE-2021-21857 is classified as a high severity vulnerability due to its potential for arbitrary code execution via heap-based buffer overflows.
How do I fix CVE-2021-21857?
To resolve CVE-2021-21857, update the GPAC library to a patched version such as 0.5.2-426-gc5ad4e4+dfsg5-5, 1.0.1+dfsg1-4+deb11u3, or 2.2.1+dfsg1-3.
Which software versions are affected by CVE-2021-21857?
CVE-2021-21857 affects GPAC version 1.0.1 and specific Debian Linux distributions.
What type of vulnerability is CVE-2021-21857?
CVE-2021-21857 is an integer overflow vulnerability that can lead to security risks such as buffer overflows.
Can CVE-2021-21857 be exploited remotely?
Yes, CVE-2021-21857 can potentially be exploited remotely if an attacker can send specially crafted MPEG-4 files to the vulnerable application.