CVE-2022-24575

2022-03-1414:15:07

Google

osv.dev

7.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.9%

JSON

GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.

CPENameOperatorVersion
gpaceq1.0.1
gpaceq0.5.2
gpaceq0.7.1
gpaceq1.0.0
gpaceq0.8.0
gpaceq0.9.0
gpaceq0.6.0
gpaceq0.9.0-preview
gpaceq0.6.1
gpaceq0.7.0

Name	Operator	Version
gpac	eq	1.0.1
gpac	eq	0.5.2
gpac	eq	0.7.1
gpac	eq	1.0.0
gpac	eq	0.8.0
gpac	eq	0.9.0
gpac	eq	0.6.0
gpac	eq	0.9.0-preview
gpac	eq	0.6.1
gpac	eq	0.7.0

References

github.com/gpac/gpac/issues/2058

huntr.dev/bounties/1d9bf402-f756-4583-9a1d-436722609c1e/