CVE-2021-40609

MEDIUM

GPAC < 2.0.0 - Denial of Service via Crafted MP4Box File

Title source: llm

The GetHintFormat function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command.

Core 2

Core References

Exploit, Issue Tracking, Patch, Third Party Advisory

Third Party Advisory vendor-advisory

CVSS v3 5.5

EPSS 0.0008

EPSS Percentile 22.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-770

Status published

Products (1)

gpac/gpac < 2.0.0

Published Jun 28, 2022

Tracked Since Feb 18, 2026