CVE-2021-40944: Gpac

Medium severity, CVSS 5.5. EPSS: 0.6% chance of exploitation in the next 30 days.

In GPAC MP4Box 1.1.0, there is a Null pointer reference in the function gf_filter_pid_get_packet function in src/filter_core/filter_pid.c:5394, as demonstrated by GPAC. This can cause a denial of service (DOS).

Affected products

• Gpac Gpac: version 1.1.0 only

Published 2022-06-28. Last modified 2026-06-17.