CVE-2021-32269

medium
Published — · Modified —
CVSS v3
CVSS v2
VIR risk
5.5

Description

An issue was discovered in gpac through 20200801. A NULL pointer dereference exists in the function ilst_item_box_dump located in box_dump.c. It allows an attacker to cause Denial of Service.

Predictions

Exploit likelihood
20%
Patch ETA

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2021-32269

OS impact

OSVersionStatusFixed in
arch archfixed1:1.0.1-1
debian debianbullseyefixed1.0.1+dfsg1-2

References

Verify integrity in audit chain (admin only). AS-IS.