CVE-2021-36417: Gpac

High severity, CVSS 7.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A heap-based buffer overflow vulnerability exists in GPAC v1.0.1 in the gf_isom_dovi_config_get function in MP4Box, which causes a denial of service or execute arbitrary code via a crafted file.

Affected products

• Gpac Gpac: version 1.0.1 only

Published 2022-01-12. Last modified 2026-06-17.