medium5.5
CVE-2021-40592
GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vu…
Impact
GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulnerability in ISOBMFF reader filter, isoffin_read.c. Function isoffin_process() can result in DoS by infinite loop. To exploit, the victim must open a specially crafted mp4 file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gpac | Gpac | before 1.0.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/gpac/gpac/commit/71460d72ec07df766dab0a4d52687529f3efcf0a
- https://github.com/gpac/gpac/issues/1876
- https://www.debian.org/security/2023/dsa-5411
- https://github.com/gpac/gpac/commit/71460d72ec07df766dab0a4d52687529f3efcf0a
- https://github.com/gpac/gpac/issues/1876
- https://www.debian.org/security/2023/dsa-5411