CVE-2022-30976

Опубликовано: 18 мая 2022

Источник: nvd

CVSS3: 7.1

CVSS2: 4

EPSS Низкий

Описание

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.

Ссылки

https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/share/doc/man/gpac.1#L2226-L2229
Exploit
Third Party Advisory
https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/src/utils/utf.c#L35-L59
Third Party Advisory
https://github.com/gpac/gpac/issues/2179
Exploit
Issue Tracking
Patch
Third Party Advisory
https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/share/doc/man/gpac.1#L2226-L2229
Exploit
Third Party Advisory
https://github.com/gpac/gpac/blob/105d67985ff3c3f4b98a98f312e3d84ae77a4463/src/utils/utf.c#L35-L59
Third Party Advisory
https://github.com/gpac/gpac/issues/2179
Exploit
Issue Tracking
Patch
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gpac:gpac:2.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 47%

0.00239

Низкий

7.1 High

CVSS3

4 Medium

CVSS2

Дефекты

CWE-125

Связанные уязвимости

CVE-2022-30976

CVSS3: 7.1

ubuntu

больше 3 лет назад

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.

CVE-2022-30976

CVSS3: 7.1

debian

больше 3 лет назад

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcsl ...

GHSA-mf78-vf74-9qc5

CVSS3: 7.1

github

больше 3 лет назад

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.

EPSS

Процентиль: 47%

0.00239

Низкий

7.1 High

CVSS3

4 Medium

CVSS2

Дефекты

CWE-125