An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
An issue was discovered in GStreamer gst-plugins-good before 1.28.2. When parsing MP4 audio tracks, the isomp4 plugin's qtdemux_parse_trak function does not sufficiently validate atom data before performing division operations, leading to denial of service due to integer division by zero.
为什么是这个 VPI(可解释·实验性)
VPI 计算依据
| 影响度 | 40.00 |
| 利用信号(无额外利用信号) | ×1.00 |
| VPI | 40.00 |
VPI 公式 vpi-v1