CVE-2021-41459

Name of the Vulnerable Software and Affected Versions MP4Box version 1.0.1

Description The issue is a stack buffer overflow in the nhmldmx send sample() function at src/filters/dmx nhml.c:1008, specifically affecting the szXmlFrom parameter. This leads to a denial of service vulnerability.

Recommendations For MP4Box version 1.0.1, consider disabling the nhmldmx send sample() function as a temporary workaround until a patch is available. Restrict access to the szXmlFrom parameter in the affected function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.