{"id":"CVE-2021-40562","details":"A Segmentation fault caused by a floating point exception exists in Gpac through 1.0.1 using mp4box via the naludmx_enqueue_or_dispatch function in reframe_nalu.c, which causes a denial of service.","modified":"2026-08-03T14:35:17.877382Z","published":"2022-01-12T22:15:07.760Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"last_affected":"1.0.1"}],"source":"CPE_RANGE","vendor_product":"gpac:gpac","cpes":["cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*"]},{"extracted_events":[{"fixed":"1.0.1"}],"source":"DESCRIPTION"}]},"references":[{"type":"ADVISORY","url":"https://github.com/gpac/gpac/issues/1901"},{"type":"ADVISORY","url":"https://www.debian.org/security/2023/dsa-5411"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/5dd71c7201a3e5cf40732d585bfb21c906c171d3"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"fixed":"5dd71c7201a3e5cf40732d585bfb21c906c171d3"}],"database_specific":{"source":"REFERENCES"}}],"versions":["v1.0.0","v0.9.0","v0.9.0-preview","v0.6.0","v0.5.2"],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-40562.json","vanir_signatures_modified":"2026-08-03T14:35:17Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/gpac/gpac/commit/5dd71c7201a3e5cf40732d585bfb21c906c171d3","target":{"file":"src/filters/reframe_nalu.c","function":"naludmx_create_avc_decoder_config"},"deprecated":false,"digest":{"function_hash":"222909125538054554142696760066351192249","length":4834},"id":"CVE-2021-40562-808dadcc","signature_type":"Function"},{"target":{"file":"src/filters/reframe_nalu.c"},"deprecated":false,"digest":{"line_hashes":["111753558529549020020712736279529203355","312475701619028868588341076389345054319","210095339424249211427502420724033199260","306106039706621833680095253597863398070","83200840015914086248955994616472368455","125570266520436794753878286141420955597"],"threshold":0.9},"id":"CVE-2021-40562-861a6994","signature_type":"Line","signature_version":"v1","source":"https://github.com/gpac/gpac/commit/5dd71c7201a3e5cf40732d585bfb21c906c171d3"}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}