Lucene search

K
ubuntucveUbuntu.comUB:CVE-2022-47662
HistoryJan 05, 2023 - 12:00 a.m.

CVE-2022-47662

2023-01-0500:00:00
ubuntu.com
ubuntu.com
15
gpac mp4box
segment fault
infinite recursion
media_getsample
isomedia
stack overflow

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

22.8%

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow)
due to infinite recursion in Media_GetSample isomedia/media.c:662

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

22.8%