Ubuntu.comUB:CVE-2022-3957CVE-2022-3957
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.3%
A vulnerability classified as problematic was found in GPAC. Affected by
this vulnerability is the function svg_parse_preserveaspectratio of the
file scenegraph/svg_attributes.c of the component SVG Parser. The
manipulation leads to memory leak. The attack can be launched remotely. The
name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is
recommended to apply a patch to fix this issue. The associated identifier
of this vulnerability is VDB-213463.
Notes
| Author | Note |
|---|---|
| eslerm | CVE possibly assigned based on commit message |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
6.6 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
61.3%