CVE-2021-40573: Double Free
Published Jan 13, 2022
·Updated
The binary MP4Box in Gpac 1.0.1 has a double-free vulnerability in the gflistdel function in list.c, which allows attackers to cause a denial of service.
Affected Software
1 affected component
Gpac GPAC=1.0.1
Remediation
Event History
Jan 13, 2022
CVE Published
via MITRE·06:05 PM
Data Sourced
via MITRE·06:05 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-40573?
CVE-2021-40573 is classified as a high severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2021-40573?
To fix CVE-2021-40573, upgrade Gpac to version 1.0.2 or later.
3
What types of attacks can exploit CVE-2021-40573?
CVE-2021-40573 can be exploited by attackers to trigger a double-free condition leading to denial of service.
4
Which software is affected by CVE-2021-40573?
CVE-2021-40573 affects Gpac version 1.0.1.
5
What functions are involved in the exploitation of CVE-2021-40573?
The gf_list_del function in list.c is the main function involved in the double-free vulnerability of CVE-2021-40573.