Lucene search

GoogleOSV:CVE-2022-29537

HistoryApr 20, 2022 - 11:15 p.m.

CVE-2022-29537

2022-04-2023:15:08

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

23.8%

JSON

gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.

CPENameOperatorVersion
gpaceq1.0.1
gpaceq0.5.2
gpaceq0.7.1
gpaceq1.0.0
gpaceq2.0.0
gpaceq0.8.0
gpaceq0.9.0
gpaceq0.6.0
gpaceq0.9.0-preview
gpaceq0.6.1

Name	Operator	Version
gpac	eq	1.0.1
gpac	eq	0.5.2
gpac	eq	0.7.1
gpac	eq	1.0.0
gpac	eq	2.0.0
gpac	eq	0.8.0
gpac	eq	0.9.0
gpac	eq	0.6.0
gpac	eq	0.9.0-preview
gpac	eq	0.6.1

Rows per page:

1-10 of 111

References

github.com/gpac/gpac/issues/2173

www.debian.org/security/2023/dsa-5411