Vulnerabilities > CVE-2021-36584 - Out-of-bounds Write vulnerability in Gpac 1.0.1

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
gpac
CWE-787

Summary

An issue was discovered in GPAC 1.0.1. There is a heap-based buffer overflow in the function gp_rtp_builder_do_tx3g function in ietf/rtp_pck_3gpp.c, as demonstrated by MP4Box. This can cause a denial of service (DOS).

Vulnerable Configurations

Part Description Count
Application
Gpac
1

Common Weakness Enumeration (CWE)