CVE:CVE-2021-21861
CNNVD:CNNVD-202108-1480
GPAC Project Advanced Content是MPEG-4系统标准的实现，以ANSI C编写。
GPAC Project Advanced Content library v1.0.1上的MPEG-4解码功能存在安全漏洞。该漏洞源于处理“hdlr”FOURCC代码时，精心构建的MPEG-4输入可能会导致不正确的内存分配，从而导致基于堆的缓冲区溢出，导致内存损坏。
solution:Upgrade gpac gpac to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade debian debian_linux to a higher version than 11.0,and avoid the version 11.0