Approved changes feed: RSS · Atom

cpe:2.3:a:gpac:mp4box:1.1.0:*:*:*:*:*:*:*

part: a version: 1.1.0 update: *

VendorGpac (b65d5cc2-7ccf-54fa-ae70-c5b6a48e9c64)
ProductMp4Box (b6806900-decc-53ba-87c7-c9e15412ffcc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/gcswest/gpac purl2cpe 2026-06-01 10:16:27.725191
pkg:deb/debian/gpac purl2cpe 2026-06-01 10:16:27.725193
pkg:deb/ubuntu/gpac purl2cpe 2026-06-01 10:16:27.725194
pkg:github/felixge/gpac purl2cpe 2026-06-01 10:16:27.725196
pkg:github/gpac/gpac purl2cpe 2026-06-01 10:16:27.725197

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-41458 vulnerable 2026-06-08 05:35:20.571549 Details available
In GPAC MP4Box v1.1.0, there is a stack buffer overflow at src/utils/error.c:1769 which leads to a denial of service vulnerability.
Published: 2022-06-16T09:19:53.000Z
Updated: 2024-08-04T03:15:27.303Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-41457 vulnerable 2026-06-08 05:35:20.571036 Details available
There is a stack buffer overflow in MP4Box 1.1.0 at src/filters/dmx_nhml.c in nhmldmx_init_parsing which leads to a denial of service vulnerability.
Published: 2021-10-01T00:00:00.000Z
Updated: 2024-08-04T03:15:28.293Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.