What’s Vulnerable › Vulnerabilities

CVE-2021-30020

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-04-19 · updated 2026-06-17
• Weakness: CWE-787

Description

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.

Affected products

• GPAC: 1.0.1

References

• https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788
• https://github.com/gpac/gpac/issues/1722
• https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788
• https://github.com/gpac/gpac/issues/1722

Get alerted when CVE-2021-30020 or the next vulnerability affects your stack