There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash.
References
| Link | Resource |
|---|---|
| https://github.com/gpac/gpac/blob/v0.5.2/src/media_tools/av_parsers.c#L2344 | |
| https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788 | Patch Third Party Advisory |
| https://github.com/gpac/gpac/issues/1720 | Exploit Third Party Advisory |
| https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788 | Patch Third Party Advisory |
| https://github.com/gpac/gpac/issues/1720 | Exploit Third Party Advisory |
Configurations
History
05 Mar 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) There is a integer overflow in media_tools/av_parsers.c in the gf_avc_read_pps_bs_internal in GPAC from 0.5.2 to 1.0.1. pps_id may be a negative number, so it will not return. However, avc->pps only has 255 unit, so there is an overflow, which results a crash. | |
| References |
|
Information
Published : 2021-04-19 20:15
Updated : 2025-03-05 23:15
NVD link : CVE-2021-30022
Mitre link : CVE-2021-30022
CVE.ORG link : CVE-2021-30022
JSON object : View
Products Affected
gpac
- gpac
CWE
CWE-190
Integer Overflow or Wraparound