CVE-2021-29279

There is a integer overflow in function filter_core/filter_props.c:gf_props_assign_value in GPAC 1.0.1. In which, the arg const GF_PropertyValue *value,maybe value->value.data.size is a negative number. In result, memcpy in gf_props_assign_value failed.

• CWE-190
• CWE-787

• https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5bPatch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1718Exploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/da69ad1f970a7e17c865eaec9af98cc84df10d5bPatch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1718Exploit, Third Party Advisory

Published

Apr 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-29265An issue was discovered in the Linux kernel before 5.11.7. u…4.7
• CVE-2021-29266An issue was discovered in the Linux kernel before 5.11.9. d…7.8
• CVE-2021-29267Sherlock SherlockIM through 2021-03-29 allows Cross Site Scr…6.1
• CVE-2021-29271remark42 before 1.6.1 allows XSS, as demonstrated by "Locato…6.1
• CVE-2021-29272bluemonday before 1.0.5 allows XSS because certain Go lowerc…6.1
• CVE-2021-29274Redmine 4.1.x before 4.1.2 allows XSS because an issue's sub…6.1
• CVE-2021-29280In TP-Link Wireless N Router WR840N an ARP poisoning attack …6.4
• CVE-2021-29281File upload vulnerability in GFI Mail Archiver versions up t…9.8
• CVE-2021-29294Null Pointer Dereference vulnerability exists in D-Link DSL-…7.5
• CVE-2021-29295Null Pointer Dereference vulnerability exists in D-Link DSP-…7.5
• CVE-2021-29296Null Pointer Dereference vulnerability in D-Link DIR-825 2.1…7.5
• CVE-2021-29297Buffer Overflow in Emerson GE Automation Proficy Machine Edi…5.3