CVE-2021-32138

Name of the Vulnerable Software and Affected Versions GPAC version 1.0.1

Description The issue is related to the DumpTrackInfo function in the MP4Box command, which allows attackers to cause a denial of service via a crafted file. This is due to a NULL pointer dereference error. The exploitation of this issue can be done remotely.

Recommendations For GPAC version 1.0.1, consider disabling the DumpTrackInfo function as a temporary workaround until a patch is available. Restrict access to the MP4Box command to minimize the risk of exploitation. Avoid using crafted files that could trigger the NULL pointer dereference error.