CVE-2022-36190

Опубликовано: 17 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.

Ссылки

https://github.com/gpac/gpac/issues/2220
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.debian.org/security/2023/dsa-5411
https://github.com/gpac/gpac/issues/2220
Exploit
Issue Tracking
Patch
Third Party Advisory
https://www.debian.org/security/2023/dsa-5411

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*

Версия до 2.2.0 (исключая)

EPSS

Процентиль: 32%

0.00127

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVE-2022-36190

CVSS3: 9.8

ubuntu

больше 3 лет назад

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.

CVE-2022-36190

CVSS3: 9.8

debian

больше 3 лет назад

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerabili ...

GHSA-h6jp-7q5x-g3xx

CVSS3: 9.8

github

больше 3 лет назад

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.

EPSS

Процентиль: 32%

0.00127

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-416