{"vulnerability": "CVE-2021-21839", "sightings": [{"uuid": "9eb8a54b-5d6b-4310-893f-63637378045c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "seen", "source": "https://t.me/cibsecurity/27503", "content": "\u203c CVE-2021-21839 \u203c\n\nMultiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project on Advanced Content library v1.0.1. A specially crafted MPEG-4 input can cause an integer overflow due to unchecked arithmetic resulting in a heap-based buffer overflow that causes memory corruption. An attacker can convince a user to open a video to trigger this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2021-08-18T16:16:49.000000Z"}, {"uuid": "b0439ef8-53ef-4dc6-8046-f6d93933ca03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/4219", "content": "#exploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844,\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2024-03-29T14:38:26.000000Z"}, {"uuid": "8b697745-99ac-4d02-81b1-a4124a36b971", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "seen", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-01T17:00:41.328185Z"}, {"uuid": "1097a058-91ae-409c-8a2c-8c9a14760f6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "seen", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-02T01:04:27.294707Z"}, {"uuid": "d252e4e2-fb6b-4b1a-9601-b547db70e6ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-10T20:00:10.026622Z"}, {"uuid": "34165797-2618-40a8-bf44-83755bfea1a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-21839", "type": "published-proof-of-concept", "source": "https://t.me/cissp/4288", "content": "Blue Team Techniques\n1. Multiple vulnerabilities in EMC VNX NAS 8.1.9-232\nSecurity Advisory\nhttps://www.errno.fr/VNX_advisory\n2. Anatomy and Disruption of Metasploit Shellcode\nhttps://blog.nviso.eu/2021/09/02/anatomy-and-disruption-of-metasploit-shellcode\n\nRed Team Tactics\n1. Linphone SIP Protocol Stack:\nCrashing SIP Clients With a Single Slash\nhttps://claroty.com/2021/08/31/blog-research-crashing-sip-clients-with-a-single-slash\n2. MacOS Security & Privilege Escalation\nhttps://book.hacktricks.xyz/macos/macos-security-and-privilege-escalation\n\nexploit\nPoCs for exploiting CVE-2021-21847, \nCVE-2021-21853, CVE-2021-21845, \nCVE-2021-21846, CVE-2021-21844\nCVE-2021-21839:\nhttps://github.com/AlAIAL90/CVE-2021-21847\nhttps://github.com/AlAIAL90/CVE-2021-21853\nhttps://github.com/AlAIAL90/CVE-2021-21845\nhttps://github.com/AlAIAL90/CVE-2021-21846\nhttps://github.com/AlAIAL90/CVE-2021-21844\nhttps://github.com/AlAIAL90/CVE-2021-21839\n// Multiple exploitable integer overflow vulnerabilities exist within the MPEG-4 decoding functionality of the GPAC Project", "creation_timestamp": "2026-09-11T00:00:28.346924Z"}]}