CVE-2022-4202mediumCWE-189

CVE-2022-4202: fallo de gravedad media en GPAC

GPAC lsr_dec.c lsr_translate_coords integer overflow

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear GPAC+ Monitorear gpac

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 0.9%
A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the file laser/lsr_dec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908. It is recommended to apply a patch to fix this issue. VDB-214518 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Productos afectados
unspecified · GPAC
CVEs relacionadas — GPAC

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-3957MEDIUMGPAC SVG Parser svg_attributes.c svg_parse_preserveaspectratio memory leakEPSS 1.3%