CVE-2021-40592

Katalog CVE

CVSS 5.5 · Medium EPSS 0,85%

Kerentanan Loop with Unreachable Exit Condition ('Infinite Loop') pada gpac. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

GPAC version before commit 71460d72ec07df766dab0a4d52687529f3efcf0a (version v1.0.1 onwards) contains loop with unreachable exit condition ('infinite loop') vulnerability in ISOBMFF reader filter, isoffin_read.c. Function isoffin_process() can result in DoS by infinite loop. To exploit, the victim must open a specially crafted mp4 file.

Rincian

Terbit di NVD

8 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-835: Loop with Unreachable Exit Condition ('Infinite Loop')

EPSS (30 hari)

0,85% peluang dieksploitasi; lebih tinggi dari 57,0% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/gpac/gpac/commit/71460d72ec07df766dab0a4d52687529f3efcf0a patch · advisory pihak ketiga
• https://github.com/gpac/gpac/issues/1876 exploit · issue tracking · advisory pihak ketiga
• https://www.debian.org/security/2023/dsa-5411