{"id":"CVE-2021-33364","details":"Memory leak in the def_parent_box_new function in MP4Box in GPAC 1.0.1 allows attackers to read memory via a crafted file.","modified":"2026-08-03T14:35:14.435906Z","published":"2021-09-13T19:15:13.987Z","database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.0.1"},{"last_affected":"1.0.1"}],"source":"CPE_STRING","vendor_product":"gpac:gpac"}]},"references":[{"type":"ADVISORY","url":"https://www.debian.org/security/2023/dsa-5411"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7"},{"type":"FIX","url":"https://github.com/gpac/gpac/issues/1783"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"fixed":"fe5155cf047252d1c4cb91602048bfa682af0ea7"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v1.0.0","v0.9.0","v0.9.0-preview","v0.6.0","v0.5.2"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-33364.json","vanir_signatures_modified":"2026-08-03T14:35:14Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7","target":{"function":"gf_isom_parse_movie_boxes_internal","file":"src/isomedia/isom_intern.c"},"deprecated":false,"digest":{"function_hash":"223423912552931114097759049568591891683","length":13301},"id":"CVE-2021-33364-77dab79e"},{"digest":{"line_hashes":["192002788294647570961132210103316462265","48465482772313338867877031409000081430","300710342515645620793960887718186287929","144339146887705604177811712246793411966"],"threshold":0.9},"id":"CVE-2021-33364-9ed6b284","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/fe5155cf047252d1c4cb91602048bfa682af0ea7","target":{"file":"src/isomedia/isom_intern.c"},"deprecated":false}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"}]}