An exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: talos

Published: 2021-08-25T18:23:31

Updated: 2024-08-03T18:23:29.572Z

Reserved: 2021-01-04T00:00:00

Link: CVE-2021-21841

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2021-08-25T19:15:09.063

Modified: 2024-11-21T05:49:05.270

Link: CVE-2021-21841

cve-icon Redhat

No data.