CVE-2021-4043: Motion Spell GPAC Null Pointer Dereference Vulnerability
Motion Spell GPAC contains a null pointer dereference vulnerability that could allow a local attacker to cause a denial-of-service (DoS) condition.
Other sources
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/gpacto a version that resolves this vulnerability.Fixed in 0.5.2-426-gc5ad4e4+dfsg5-5Fixed in 1.0.1+dfsg1-4+deb11u3Fixed in 2.2.1+dfsg1-3 - Upgrade
Upgrade
gpac/gpacto a version that resolves this vulnerability.Fixed in 1.1.0 - Compensating control
Discontinue use of Motion Spell GPAC if vendor mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2021-4043?
CVE-2021-4043 is classified as a high severity vulnerability due to its potential to cause a denial-of-service condition.
How do I fix CVE-2021-4043?
To fix CVE-2021-4043, upgrade the GPAC library to version 1.1.0 or later.
Who is affected by CVE-2021-4043?
CVE-2021-4043 affects users of GPAC versions prior to 1.1.0.
What type of vulnerability is CVE-2021-4043?
CVE-2021-4043 is a null pointer dereference vulnerability.
Can CVE-2021-4043 be exploited remotely?
CVE-2021-4043 requires local access to exploit the null pointer dereference vulnerability.