CVE-2021-28300 | BDVDB-2026-152149 Detail

Description#

NULL Pointer Dereference in the "isomedia/track.c" module's "MergeTrack()" function of GPAC v0.5.2 allows attackers to execute arbitrary code or cause a Denial-of-Service (DoS) by uploading a malicious MP4 file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/gpac/gpac/issues/1702

Exploit#

No public exploit known

History#

Version 12021-04-14Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.