3 matches found
CVE-2022-30976
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
7.1CVSS0.00865EPSS
SaveExploits1References6
CVE-2022-30976: Out-of-bounds Read
GPAC 2.0.0 misuses a certain Unicode utf8wcslen renamed gfutf8wcslen function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box...
7.1CVSS7.2AI score0.00865EPSS
SaveExploits1References2
PT-2022-20433
Name of the Vulnerable Software and Affected Versions GPAC version 2.0.0 Description The issue is related to the misuse of a certain Unicode function, specifically utf8 wcslen renamed gf utf8 wcslen, in the utils/utf.c file. This results in a heap-based buffer over-read, which can be demonstrated...
7.1CVSS0.00865EPSS
SaveExploits1References12
20