CVE-2021-36412
CVE-2021-36412
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
10 Jan 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →