CVE-2021-36584

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1

Description An issue was discovered in GPAC, where a heap-based buffer overflow occurs in the gp rtp builder do tx3g function in ietf/rtp pck 3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).

Recommendations For GPAC version 1.0.1, consider disabling the gp rtp builder do tx3g function as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.