{"vulnerability": "CVE-2021-21845", "sightings": [{"uuid": "76ef1df6-f112-44c9-a2bd-3d74d45b5efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21845", "type": "seen", "source": "https://t.me/cibsecurity/27514", "content": "\u203c CVE-2021-21845 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in \u00e2\u20ac\u0153stsc\u00e2\u20ac\ufffd decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:17:03.000000Z"}, {"uuid": "5926216f-f4e9-457b-bf0b-a208e1e47931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21845", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}, {"uuid": "3705dbdd-e84c-44ca-8947-a4264912d0ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21845", "type": "seen", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-01T17:00:41.301534Z"}, {"uuid": "66da79d6-0c8f-43b8-b1fd-cf4ca1e17fa9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21845", "type": "seen", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-02T01:04:27.248424Z"}]}