CVE-2021-4043
NULL Pointer Dereference in gpac/gpac
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
5.8
NULL Pointer Dereference in gpac/gpac
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
CVE-2021-4043- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Weakness
- CWE-476
- Updated
- 2026-11-04
EUVDEUVD-2021-33941
5.8
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
EUVD-2021-33941- CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jm63-cmh5-jrcj
5.5
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
GHSA-jm63-cmh5-jrcj- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
5.5
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
CVE-2021-4043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-476
- Updated
- 2026-11-04
OSV
5.5
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
CVE-2021-4043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
OSVDEBIAN-CVE-2021-4043
5.5
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
DEBIAN-CVE-2021-4043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-4043
5.5
NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0.
- Record
UBUNTU-CVE-2021-4043- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS 3.0
- 5.8 Medium
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L - Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gpacDebian:11 |
before 1.0.1+dfsg1-4+deb11u2, plus listed versions 1.0.1+dfsg1-41.0.1+dfsg1-4+deb11u1 |
1.0.1+dfsg1-4+deb11u2 |
gpacDebian:11 From an advisory covering 106 CVEs |
before 1.0.1+dfsg1-4+deb11u2, plus listed versions 1.0.1+dfsg1-41.0.1+dfsg1-4+deb11u1 |
1.0.1+dfsg1-4+deb11u2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | cyberark/PwnKit-Hunter | 2022-01-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | CVE List, NVD, OSV | |
| facts | CVE List, EUVD | |
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-4043 is a medium vulnerability (CVSS 5.8) in Gpac, published February 4, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 4.61%, the 91st percentile. Fixed in gpac 1.0.1+dfsg1-4+deb11u2.
References
huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47
github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db
debian.org/security/2023/dsa-5411
nvd.nist.gov/vuln/detail/CVE-2021-4043
github.com/advisories/GHSA-jm63-cmh5-jrcj
security-tracker.debian.org/tracker/CVE-2021-4043
ubuntu.com/security/CVE-2021-4043
cve.org/CVERecord?id=CVE-2021-4043
cisa.gov/known-exploited-vulnerabilities-catalog