{"vulnerability": "CVE-2021-2184", "sightings": [{"uuid": "de1a3f6e-0cf3-47de-92c7-9e6ee47856ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21840", "type": "seen", "source": "https://t.me/cibsecurity/27882", "content": "\u203c CVE-2021-21840 \u203c\n\nAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input used to process an atom using the \u00e2\u20ac\u0153saio\u00e2\u20ac\ufffd FOURCC code cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:26:01.000000Z"}, {"uuid": "2b119282-7c78-4153-9e46-6fe6426199e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21842", "type": "seen", "source": "https://t.me/cibsecurity/27890", "content": "\u203c CVE-2021-21842 \u203c\n\nAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when processing an atom using the 'ssix' FOURCC code, due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:26:14.000000Z"}, {"uuid": "f445b521-9146-4f6d-88a6-6d0e3559d6d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21849", "type": "seen", "source": "https://t.me/cibsecurity/27887", "content": "\u203c CVE-2021-21849 \u203c\n\nAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow when the library encounters an atom using the \u00e2\u20ac\u0153tfra\u00e2\u20ac\ufffd FOURCC code due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:26:09.000000Z"}, {"uuid": "d51e8bba-cf2a-4e69-a96d-32dd0d1cb85c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21841", "type": "seen", "source": "https://t.me/cibsecurity/27885", "content": "\u203c CVE-2021-21841 \u203c\n\nAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when reading an atom using the 'sbgp' FOURCC code can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:26:06.000000Z"}, {"uuid": "63aa0c80-ec3f-4117-83de-5690d845409b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21848", "type": "seen", "source": "https://t.me/cibsecurity/27878", "content": "\u203c CVE-2021-21848 \u203c\n\nAn exploitable integer overflow vulnerability exists within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. The library will actually reuse the parser for atoms with the \u00e2\u20ac\u0153stsz\u00e2\u20ac\ufffd FOURCC code when parsing atoms that use the \u00e2\u20ac\u0153stz2\u00e2\u20ac\ufffd FOURCC code and can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-25T22:25:55.000000Z"}, {"uuid": "399519c2-3235-41bb-b850-e61538182e69", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21843", "type": "seen", "source": "https://t.me/cibsecurity/27515", "content": "\u203c CVE-2021-21843 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. After validating the number of ranges, at [41] the library will multiply the count by the size of the GF_SubsegmentRangeInfo structure. On a 32-bit platform, this multiplication can result in an integer overflow causing the space of the array being allocated to be less than expected. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:17:05.000000Z"}, {"uuid": "76ef1df6-f112-44c9-a2bd-3d74d45b5efe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21845", "type": "seen", "source": "https://t.me/cibsecurity/27514", "content": "\u203c CVE-2021-21845 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in \u00e2\u20ac\u0153stsc\u00e2\u20ac\ufffd decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:17:03.000000Z"}, {"uuid": "97ccbbd5-b409-43f1-ab05-2ae152d22560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21844", "type": "seen", "source": "https://t.me/cibsecurity/27507", "content": "\u203c CVE-2021-21844 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input when encountering an atom using the \u00e2\u20ac\u0153stco\u00e2\u20ac\ufffd FOURCC code, can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:56.000000Z"}, {"uuid": "8598a8ce-5a1a-4ada-b725-703fec3184cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21846", "type": "seen", "source": "https://t.me/cibsecurity/27505", "content": "\u203c CVE-2021-21846 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in \u00e2\u20ac\u0153stsz\u00e2\u20ac\ufffd decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:54.000000Z"}, {"uuid": "2349951f-4b3d-4b88-bd6a-d83446868ea4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21847", "type": "seen", "source": "https://t.me/cibsecurity/27500", "content": "\u203c CVE-2021-21847 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input in \u00e2\u20ac\u0153stts\u00e2\u20ac\ufffd decoder can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:46.000000Z"}, {"uuid": "3ad62119-d2d2-4635-8036-741af97cb17b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21846", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}, {"uuid": "877a4df4-e587-4d0f-9591-8c3d1b253719", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21847", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}, {"uuid": "5926216f-f4e9-457b-bf0b-a208e1e47931", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21845", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}, {"uuid": "3aaa9daf-c37a-4e15-8f36-434c5ebef8b5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2021-21844", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}]}