CVE-2021-30015

There is a Null Pointer Dereference in function filter_core/filter_pck.c:gf_filter_pck_new_alloc_internal in GPAC 1.0.1. The pid comes from function av1dmx_parse_flush_sample, the ctx.opid maybe NULL. The result is a crash in gf_filter_pck_new_alloc_internal.

• CWE-476

• https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ecPatch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1719Exploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/13dad7d5ef74ca2e6fe4010f5b03eb12e9bbe0ecPatch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1719Exploit, Third Party Advisory

Published

Apr 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30002An issue was discovered in the Linux kernel before 5.11.3 wh…6.2
• CVE-2021-30003An issue was discovered on Nokia G-120W-F 3FE46606AGAB91 dev…4.8
• CVE-2021-30004In wpa_supplicant and hostapd 2.9, forging attacks may occur…5.3
• CVE-2021-30005In JetBrains PyCharm before 2020.3.4, local code execution w…7.8
• CVE-2021-30006In IntelliJ IDEA before 2020.3.3, XXE was possible, leading …7.5
• CVE-2021-30014There is a integer overflow in media_tools/av_parsers.c in t…5.5
• CVE-2021-30019In the adts_dmx_process function in filters/reframe_adts.c i…5.5
• CVE-2021-3002Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/lo…6.1
• CVE-2021-30020In the function gf_hevc_read_pps_bs_internal function in med…5.5
• CVE-2021-30022There is a integer overflow in media_tools/av_parsers.c in t…5.5
• CVE-2021-30027md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to …5.5
• CVE-2021-30028SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use def…7.2