CVE-2021-28300
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrac ...
Severity by source
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Ubuntu (medium).
Description
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| debian 10 | ccextractor, gpac | no fix listed |
| debian 11 | ccextractor, gpac | 1.0.1+dfsg1-4 |
| debian 9 | gpac | no fix listed |
| rapidfort ubuntu 20.04 | gpac | no fix listed |
| rapidfort ubuntu 22.04 | gpac | no fix listed |
| rapidfort ubuntu 24.04 | gpac | no fix listed |
| ubuntu 18.04-ESM | gpac | no fix listed |
| ubuntu 20.04-ESM | gpac | no fix listed |
| ubuntu 22.04 | gpac | no fix listed |
| ubuntu 24.04 | gpac | no fix listed |
Show all 12 entries from 10 sources
| Source | Package | Fixed in |
|---|---|---|
| debian 10 | ccextractor | no fix listed |
| debian 10 | gpac | no fix listed |
| debian 11 | ccextractor | no fix listed |
| debian 11 | gpac | 1.0.1+dfsg1-4 |
| debian 9 | gpac | no fix listed |
| rapidfort ubuntu 20.04 | gpac | no fix listed |
| rapidfort ubuntu 22.04 | gpac | no fix listed |
| rapidfort ubuntu 24.04 | gpac | no fix listed |
| ubuntu 18.04-ESM | gpac | no fix listed |
| ubuntu 20.04-ESM | gpac | no fix listed |
| ubuntu 22.04 | gpac | no fix listed |
| ubuntu 24.04 | gpac | no fix listed |