CVE-2021-31261

The gf_hinter_track_new function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command.

• CWE-119

• https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65Patch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1737Exploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/cd3738dea038dbd12e603ad48cd7373ae0440f65Patch, Third Party Advisory
• https://github.com/gpac/gpac/issues/1737Exploit, Third Party Advisory

Published

Apr 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31255Buffer overflow in the abst_box_read function in MP4Box in G…7.8
• CVE-2021-31256Memory leak in the stbl_GetSampleInfos function in MP4Box in…5.5
• CVE-2021-31257The HintFile function in GPAC 1.0.1 allows attackers to caus…5.5
• CVE-2021-31258The gf_isom_set_extraction_slc function in GPAC 1.0.1 allows…5.5
• CVE-2021-31259The gf_isom_cenc_get_default_info_internal function in GPAC …5.5
• CVE-2021-31260The MergeTrack function in GPAC 1.0.1 allows attackers to ca…5.5
• CVE-2021-31262The AV1_DuplicateConfig function in GPAC 1.0.1 allows attack…5.5
• CVE-2021-3127NATS Server 2.x before 2.2.0 and JWT library before 2.0.1 ha…7.5
• CVE-2021-31272SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb…9.8
• CVE-2021-31274In LibreNMS < 21.3.0, a stored XSS vulnerability was identif…5.4
• CVE-2021-3128In ASUS RT-AX3000, ZenWiFi AX (XT8), RT-AX88U, and other ASU…7.5
• CVE-2021-31280An issue was discovered in tp5cms through 2017-05-25. admin.…6.1