CVE-2021-36412: Gpac

High severity, CVSS 7.8. EPSS: 0.8% chance of exploitation in the next 30 days.

A heap-based buffer overflow vulnerability exists in MP4Box in GPAC 1.0.1 via the gp_rtp_builder_do_mpeg12_video function, which allows attackers to possibly have unspecified other impact via a crafted file in the MP4Box command,

Affected products

• Gpac Gpac: version 1.0.1 only

Published 2022-01-10. Last modified 2026-06-17.