CVE-2021-30020

In the function gf_hevc_read_pps_bs_internal function in media_tools/av_parsers.c in GPAC 1.0.1 there is a loop, which with crafted file, pps->num_tile_columns may be larger than sizeof(pps->column_width), which results in a heap overflow in the loop.

• CWE-787

• https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788Patch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1722Exploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/51cdb67ff7c5f1242ac58c5aa603ceaf1793b788Patch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1722Exploit, Third Party Advisory

Published

Apr 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-30005In JetBrains PyCharm before 2020.3.4, local code execution w…7.8
• CVE-2021-30006In IntelliJ IDEA before 2020.3.3, XXE was possible, leading …7.5
• CVE-2021-30014There is a integer overflow in media_tools/av_parsers.c in t…5.5
• CVE-2021-30015There is a Null Pointer Dereference in function filter_core/…5.5
• CVE-2021-30019In the adts_dmx_process function in filters/reframe_adts.c i…5.5
• CVE-2021-3002Seo Panel 4.8.0 allows reflected XSS via the seo/seopanel/lo…6.1
• CVE-2021-30022There is a integer overflow in media_tools/av_parsers.c in t…5.5
• CVE-2021-30027md_analyze_line in md4c.c in md4c 0.4.7 allows attackers to …5.5
• CVE-2021-30028SOOTEWAY Wi-Fi Range Extender v1.5 was discovered to use def…7.2
• CVE-2021-3003Agenzia delle Entrate Desktop Telematico 1.0.0 contacts the …5.3
• CVE-2021-30030Cross Site Scripting (XSS) in Remote Clinic v2.0 via the Ful…5.4
• CVE-2021-30031Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…