CVE-2022-24576

2022-03-1414:15:07

Google

osv.dev

7.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.8%

JSON

GPAC 1.0.1 is affected by Use After Free through MP4Box.

CPENameOperatorVersion
gpaceq1.0.1
gpaceq0.5.2
gpaceq0.7.1
gpaceq1.0.0
gpaceq0.8.0
gpaceq0.9.0
gpaceq0.6.0
gpaceq0.9.0-preview
gpaceq0.6.1
gpaceq0.7.0

Name	Operator	Version
gpac	eq	1.0.1
gpac	eq	0.5.2
gpac	eq	0.7.1
gpac	eq	1.0.0
gpac	eq	0.8.0
gpac	eq	0.9.0
gpac	eq	0.6.0
gpac	eq	0.9.0-preview
gpac	eq	0.6.1
gpac	eq	0.7.0

References

github.com/gpac/gpac/issues/2061

huntr.dev/bounties/011ac07c-6139-4f43-b745-424143e60ac7/