CVE-2021-29279 Integer overflow in n/a

High 7.8 Published 19 Apr 2021 Updated 3 Aug 2024

An integer overflow in GPAC's property assignment function can cause a memory copy failure, leading to a denial of service.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: A user has to click or open something
Fix: Available

What is CVE-2021-29279?

CVE-2021-29279 is a high-severity vulnerability in Gpac Gpac, published on 19 Apr 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.

Official description

There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed.

Weakness: CWE-787, CWE-190

Which versions are affected by CVE-2021-29279?

It affects 1 product.

Products include Gpac Gpac.

How do I fix CVE-2021-29279?

Apply the vendor's patch.

Is CVE-2021-29279 being exploited?

There is no known exploitation of CVE-2021-29279 in the wild and no public exploit code.

All Gpac Gpac vulnerabilities

Sources

Also known as DEBIAN-CVE-2021-29279, GHSA-6wx8-5pfm-wp73, UBUNTU-CVE-2021-29279.