Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-28300
9.8
CRITICALCVSS v3
Published
April 14, 2021
CVSS v2
7.5 HIGH
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.
gpac/gpac
GitHubGPAC Ultramedia OSS for Video Streaming & Next-Gen Multimedia Transcoding, Packaging & Delivery
GitHubGPAC Ultramedia OSS for Video Streaming & Next-Gen Multimedia Transcoding, Packaging & Delivery= 0.5.2NVD
makesoftwaresafe/gpacGitHubModular Multimedia framework for packaging, streaming and playing your favorite content.
GitHubModular Multimedia framework for packaging, streaming and playing your favorite content.= 0.5.2NVD