CVE:CVE-2021-21843
CNNVD:CNNVD-202108-1525
GPAC Project Advanced Content是MPEG-4系统标准的实现，以ANSI C编写。
GPAC Project Advanced Content 1.0.1版本存在缓冲区错误漏洞，该漏洞源于 ssix decoder的MPEG-4解码功能中的整数溢出。远程攻击者可利用该漏洞欺骗受害者打开视频，触发整数溢出并在目标系统上执行任意代码。
solution:Upgrade gpac gpac to a higher version than 1.0.1,and avoid the version 1.0.1; Upgrade debian debian_linux to a higher version than 10.0,11.0,and avoid the version 10.0,11.0