CVE-2021-40607: 
NixOS vulnerability analysis and mitigation

The schm_box_size function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command (NVD). The vulnerability was discovered in 2021 and affects GPAC versions up to 1.0.1.

The vulnerability exists in the schm_box_size function where a heap-buffer-overflow can occur due to missing '\0' check at the end of URI. When calculating the size using strlen(ptr->URI), if the URI does not end with a null terminator, it can lead to a buffer overflow (GitHub Issue). The vulnerability has been assigned a CVSS v3.1 base score of 5.5 MEDIUM (Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) (NVD).

The vulnerability can lead to a denial of service condition when processing crafted files with MP4Box command. The impact is primarily on the availability of the system, with no direct impact on confidentiality or integrity (NVD).

The vulnerability can be triggered by processing a specially crafted file using the MP4Box command. An example proof of concept demonstrates the exploitation by running './MP4BOX -hint poc -out /dev/null' with a maliciously crafted input file (GitHub Issue).

The vulnerability was addressed in GPAC version 2.0.0. Users are recommended to upgrade to this version or later to mitigate the vulnerability (NVD).