What’s Vulnerable › Vulnerabilities

CVE-2021-37231

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2021-08-04 · updated 2026-06-17
• Weakness: CWE-787

Description

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check.

Affected products

• Atomicparsley Project Atomicparsley: 20210124.204813.840499f

References

• https://github.com/wez/atomicparsley/issues/30
• https://github.com/wez/atomicparsley/pull/31#issue-687280335
• https://security.gentoo.org/glsa/202305-01
• https://github.com/wez/atomicparsley/issues/30
• https://github.com/wez/atomicparsley/pull/31#issue-687280335
• https://security.gentoo.org/glsa/202305-01

Get alerted when CVE-2021-37231 or the next vulnerability affects your stack