{"id":"CVE-2021-29279","details":"There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value-\u003evalue.data.size is a negative number. In result, memcpy in gf_props_assign_value failed.","modified":"2026-04-11T17:12:18.541642Z","published":"2021-04-19T20:15:14.287Z","references":[{"type":"FIX","url":"https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b"},{"type":"EVIDENCE","url":"https://github.com/gpac/gpac/issues/1718"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"0"},{"last_affected":"d8538e8ae946b32d99c6b2c57cbb327146e9cd9d"},{"fixed":"da69ad1f970a7e17c865eaec9af98cc84df10d5b"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.0.1"}]}}],"versions":["v0.5.2","v0.6.0","v0.7.0","v0.7.1","v0.9.0","v0.9.0-preview","v1.0.0","v1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-29279.json","vanir_signatures":[{"target":{"function":"flac_dmx_process","file":"src/filters/reframe_flac.c"},"deprecated":false,"signature_type":"Function","id":"CVE-2021-29279-688a941d","digest":{"function_hash":"271809893264534884931660195218224896488","length":4986},"source":"https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b","signature_version":"v1"},{"target":{"file":"src/filters/reframe_flac.c"},"deprecated":false,"signature_type":"Line","id":"CVE-2021-29279-8515935a","digest":{"threshold":0.9,"line_hashes":["102029437854238077049081131219035328767","1758822345310994078902333647147355295","91375987480369385241196899295650106496","164621250167976074906983121855801251933","173713928589759872021528131545224180852","120156287496062208041479094701390957082","134773658905465572514737648898400473062","67876114723218513615781741177926374455","211218421710624493902262592900065165246","171764359295326514391450423514496630009","231355731579607298891416484118488240950","152456470730324089017527564619705188047","225970606774595338019741053708735811980","59026396062773415428220475118579893939"]},"source":"https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5b","signature_version":"v1"}],"vanir_signatures_modified":"2026-04-11T17:12:18Z"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}