{"id":"CVE-2021-32438","details":"The gf_media_export_filters function in GPAC 1.0.1 allows attackers to cause a denial of service (NULL pointer dereference) via a crafted file in the MP4Box command.","modified":"2026-08-07T17:02:05.690619Z","published":"2021-08-11T20:15:08.977Z","references":[{"type":"REPORT","url":"https://github.com/gpac/gpac/issues/1769"},{"type":"FIX","url":"https://github.com/gpac/gpac/commit/00194f5fe462123f70b0bae7987317b52898b868"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/gpac/gpac","events":[{"introduced":"d8538e8ae946b32d99c6b2c57cbb327146e9cd9d"},{"last_affected":"d8538e8ae946b32d99c6b2c57cbb327146e9cd9d"},{"fixed":"00194f5fe462123f70b0bae7987317b52898b868"}],"database_specific":{"cpe":"cpe:2.3:a:gpac:gpac:1.0.1:*:*:*:*:*:*:*","extracted_events":[{"introduced":"1.0.1"},{"last_affected":"1.0.1"}],"source":["CPE_STRING","REFERENCES"]}}],"versions":["1.0.1","v1.0.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-32438.json","vanir_signatures_modified":"2026-08-07T17:02:05Z","vanir_signatures":[{"signature_version":"v1","source":"https://github.com/gpac/gpac/commit/00194f5fe462123f70b0bae7987317b52898b868","target":{"file":"src/media_tools/media_export.c","function":"gf_media_export_filters"},"deprecated":false,"digest":{"length":10399,"function_hash":"110411369548654099994106716865860766881"},"id":"CVE-2021-32438-2cf87496","signature_type":"Function"},{"source":"https://github.com/gpac/gpac/commit/00194f5fe462123f70b0bae7987317b52898b868","target":{"file":"src/media_tools/media_export.c"},"deprecated":false,"digest":{"line_hashes":["276834135827962349594238480044194601543","104037118183956055809821158770854310676","142501862856768623737846352338915616287","97019427096313354470198072370138828492"],"threshold":0.9},"id":"CVE-2021-32438-704c91a5","signature_type":"Line","signature_version":"v1"}]}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"}]}