Approved changes feed: RSS · Atom

cpe:2.3:a:gpac:mp4box:1.0.1:*:*:*:*:*:*:*

part: a version: 1.0.1 update: *

VendorGpac (b65d5cc2-7ccf-54fa-ae70-c5b6a48e9c64)
ProductMp4Box (b6806900-decc-53ba-87c7-c9e15412ffcc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/gcswest/gpac purl2cpe 2026-06-01 10:16:27.725185
pkg:deb/debian/gpac purl2cpe 2026-06-01 10:16:27.725186
pkg:deb/ubuntu/gpac purl2cpe 2026-06-01 10:16:27.725187
pkg:github/felixge/gpac purl2cpe 2026-06-01 10:16:27.725189
pkg:github/gpac/gpac purl2cpe 2026-06-01 10:16:27.725190

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41459 vulnerable 2026-06-08 05:35:20.571853 Details available
There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1008 in the nhmldmx_send_sample() function szXmlFrom parameter which leads to a denial of service vulnerability.
Published: 2021-10-01T00:00:00.000Z
Updated: 2024-08-04T03:15:27.291Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41456 vulnerable 2026-06-08 05:35:20.569499 Details available
There is a stack buffer overflow in MP4Box v1.0.1 at src/filters/dmx_nhml.c:1004 in the nhmldmx_send_sample() function szXmlTo parameter which leads to a denial of service vulnerability.
Published: 2021-10-01T00:00:00.000Z
Updated: 2024-08-04T03:15:28.090Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.