CVE Feed

    Dashboard / CVE / CVE-2021-36417

    CVE-2021-36417

    A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.

    Published:Jan 12, 2022
    Last Modified:Nov 21, 2024
    EPS:Jan 12, 2022
    EPSS Score:0.00152
    CVSS Score:7.8

    Affected Products

    Vendor
    Gpac
    Product
    Gpac

    Exploits

    https://github.com/gpac/gpac/issues/1846https://github.com/gpac/gpac/issues/1846

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2026-71612 — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79522 (CVSS 6.5) — An out-of-bounds read in the gf_dm_get_chunk_data function (src/utils/downloader.c) of GPAC v26.07.0 allows at…
    CVE-2026-71614 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the…
    CVE-2026-71616 — An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to cause a denial of service via …
    CVE-2026-71613 (CVSS 7.8) — Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute a…
    CVE-2026-79513 (CVSS 6.5) — A divide-by-zero vulnerability in the gf_dash_get_timeline_duration function (src/media_tools/dash_client.c) o…
    CVE-2026-79514 (CVSS 6.5) — An out-of-bounds read in the gf_dm_data_received function (downloader.c) of GPAC v26.07.0 allows attackers to …
    CVE-2026-52489 (CVSS 7.8) — Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute a…
    CVE-2026-15185 (CVSS 1.9) — A vulnerability was determined in GPAC 26.03-DEV. This affects the function vobsub_read_idx of the file /src/m…
    CVE-2026-50810 (CVSS 5.5) — A NULL pointer dereference in smooth_parse_stream_index() in src/media_tools/mpd.c in GPAC master HEAD before …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High