CVE-2021-41459: Buffer Overflow

Published Oct 1, 2021

Updated

There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmxnhml.c:1008 in the nhmldmxsendsample() function szXmlFrom parameter which leads to a denial of service vulnerability.

Affected Software

2 affected componentsFixes available

debian/gpac

0.5.2-426-gc5ad4e4+dfsg5-51.0.1+dfsg1-4+deb11u32.2.1+dfsg1-3

Gpac MP4Box=1.0.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade debian/gpac to a version that resolves this vulnerability.
Fixed in 0.5.2-426-gc5ad4e4+dfsg5-5Fixed in 1.0.1+dfsg1-4+deb11u3Fixed in 2.2.1+dfsg1-3

Event History

Oct 1, 2021

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2021-41459?

CVE-2021-41459 is classified as a denial of service vulnerability due to a stack buffer overflow.

How do I fix CVE-2021-41459?

To fix CVE-2021-41459, upgrade to a patched version of the affected software, specifically GPAC MP4Box 1.0.1 or newer.

What software is affected by CVE-2021-41459?

CVE-2021-41459 affects MP4Box versions 1.0.1 and earlier.

What is the nature of the vulnerability in CVE-2021-41459?

CVE-2021-41459 is a stack buffer overflow in the nhmldmx_send_sample() function.

Can CVE-2021-41459 be exploited remotely?

Yes, CVE-2021-41459 can potentially be exploited remotely, leading to a denial of service.