CVE-2021-37231

中危 5.5CVE-2021-37231 · Published 04/08/2021 · updated 17/06/2026

要点

CVE-2021-37231 是影响 atomicparsley (atomicparsley project) 的中危 (CVSS 5.5)漏洞。
未来 30 天内被利用的概率（EPSS）：0.99%，高于 62.7% 的漏洞。
暂无已修复版本：请关注参考资料中的厂商公告。

Package	Affected versions	Patched versions
atomicparsley atomicparsley_project	`= 20210124.204813.840499f`	No fix yet

Description

A stack-buffer-overflow occurs in Atomicparsley 20210124.204813.840499f through APar_readX() in src/util.cpp while parsing a crafted mp4 file because of the missing boundary check.

References

wez/atomicparsley · Exploit
wez/atomicparsley#31 · Third Party Advisory
security.gentoo.org/glsa/202305-01

atomicparsley 的其他漏洞

查看全部 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free