PT-2021-19225
CVE-2021-31259
·
تاريخ النشر
2021-04-19
·
تاريخ التحديث
2021-04-21
الوصف من
CVSS 3.1
5.5
متوسطةالمقاييسAV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
GPAC version 1.0.1
Description
The issue allows attackers to cause a denial of service, specifically a NULL pointer dereference, by using a crafted file with the MP4Box command. This is due to a problem in the
gf isom cenc get default info internal function.Recommendations
For GPAC version 1.0.1, consider avoiding the use of crafted files with the MP4Box command until a patch is available. As a temporary workaround, restrict the execution of the
gf isom cenc get default info internal function to prevent potential denial of service attacks.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾