CVE-2021-46238: Medium severity gpac mp4box vulnerability
Published Jan 21, 2022
·Updated
GPAC v1.1.0 was discovered to contain a stack overflow via the function gfnodegetname () at scenegraph/basescenegraph.c. This vulnerability can lead to a program crash, causing a Denial of Service (DoS).
Affected Software
1 affected component
Gpac GPAC=1.1.0-dev
Remediation
Patch Available
Event History
Jan 21, 2022
CVE Published
via MITRE·08:32 PM
Data Sourced
via MITRE·08:32 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for the GPAC stack overflow issue?
The vulnerability ID for the GPAC stack overflow issue is CVE-2021-46238.
2
What is the affected software version for the GPAC stack overflow vulnerability?
The affected software version for the GPAC stack overflow vulnerability is GPAC v1.1.0-dev.
3
What is the severity of the GPAC stack overflow vulnerability?
The severity of the GPAC stack overflow vulnerability is medium (5.5).
4
How does the GPAC stack overflow vulnerability manifest?
The GPAC stack overflow vulnerability manifests as a program crash, which can lead to a Denial of Service (DoS) attack.
5
Is there any fix available for the GPAC stack overflow issue?
At the moment, there is no specific fix available for the GPAC stack overflow issue. It is recommended to update to a patched version when available or apply any vendor-supplied patches.