Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2021-44922
CVE-2021-44922:
NixOS vulnerability analysis and mitigation
Overview
A null pointer dereference vulnerability exists in gpac 1.1.0 in the BD_CheckSFTimeOffset function, which causes a segmentation fault and application crash (NVD, GitHub Issue).
Technical details
The vulnerability occurs in the BD_CheckSFTimeOffset function when it attempts to perform a string comparison operation on a null pointer. When the function is called with a null pointer argument, it leads to a segmentation fault during the strcasecmp operation (GitHub Issue).
Impact
When exploited, this vulnerability results in a denial of service condition through application crash. The vulnerability affects the application's stability and availability when processing certain input files (NVD).
Exploitability
The vulnerability can be triggered by providing specially crafted input files to the application. It requires user interaction in the form of processing a malicious file through the affected function (GitHub Issue).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management