ID CVE-2021-30015
Summary There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal.
References
Vulnerable Configurations
  • cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*
CVSS
Base: 4.3 (as of 21-04-2021 - 19:21)
Impact:
Exploitability:
CWE CWE-476
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:N/A:P
Last major update 21-04-2021 - 19:21
Published 19-04-2021 - 20:15
Last modified 21-04-2021 - 19:21
Back to Top