CVE-2021-21859: Integer Overflow
An exploitable integer truncation vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The striboxread function is used when processing atoms using the 'stri' FOURCC code. An attacker can convince a user to open a video to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21859?
CVE-2021-21859 has been classified as a high-severity vulnerability due to its potential exploitation through specially crafted video files.
How do I fix CVE-2021-21859?
To fix CVE-2021-21859, you should update the GPAC library to a patched version such as 0.5.2-426-gc5ad4e4+dfsg5-5, 1.0.1+dfsg1-4+deb11u3, or 2.2.1+dfsg1-3.
What software is affected by CVE-2021-21859?
CVE-2021-21859 affects GPAC versions 1.0.1 and earlier, particularly on Debian Linux 11.0.
Can CVE-2021-21859 be exploited remotely?
Yes, CVE-2021-21859 can be exploited remotely if an attacker convinces a user to open a malicious video file.
What type of vulnerability is CVE-2021-21859?
CVE-2021-21859 is an integer truncation vulnerability that affects the MPEG-4 decoding functionality of the GPAC Project.