{"vulnerability": "CVE-2021-21846", "sightings": [{"uuid": "8598a8ce-5a1a-4ada-b725-703fec3184cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21846", "type": "seen", "source": "https://t.me/cibsecurity/27505", "content": "\u203c CVE-2021-21846 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in \u00e2\u20ac\u0153stsz\u00e2\u20ac\ufffd decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:54.000000Z"}, {"uuid": "3ad62119-d2d2-4635-8036-741af97cb17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21846", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}]}