CVE-2021-30020

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1

Description The issue arises in the gf hevc read pps bs internal function, located in media tools/av parsers.c. A crafted file can cause pps->num tile columns to be larger than sizeof(pps->column width), resulting in a heap overflow in the loop.

Recommendations For GPAC version 1.0.1, as a temporary workaround, consider disabling the gf hevc read pps bs internal function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.