CVE:CVE-2021-21858
CNNVD:CNNVD-202108-1452
GPAC Project Advanced Content是MPEG-4系统标准的实现，以ANSI C编写。
GPAC Project Advanced Content 中存在缓冲区错误漏洞，该漏洞源于产品的MPEG-4 decoding未能检查加法运算的正确性。攻击者可通过该漏洞导致内存损坏。 以下产品及版本受到影响：GPAC Project Advanced Content v1.0.1。
solution:Upgrade gpac gpac to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0