CVE-2021-40571

CVE-2021-40571 is a double-free vulnerability in the MP4Box component of Gpac 1.0.1, specifically within the ilst_box_read function. This flaw allows an attacker to trigger a denial of service, and potentially achieve arbitrary code execution or privilege escalation. With a CVSS score of 7.8 (High), exploitation requires local access and user interaction, but could lead to high impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.