Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-3957

Опубликовано: 11 нояб. 2022
Источник: nvd
CVSS3: 4.3
CVSS3: 6.5
EPSS Низкий

Описание

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*
Версия до 2.2.0 (исключая)

EPSS

Процентиль: 13%
0.00045
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-404
CWE-401

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 2 лет назад

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

CVSS3: 4.3
debian
больше 2 лет назад

A vulnerability classified as problematic was found in GPAC. Affected ...

CVSS3: 6.5
redos
больше 2 лет назад

Уязвимость GPAC

CVSS3: 6.5
github
больше 2 лет назад

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

CVSS3: 6.5
fstec
больше 2 лет назад

Уязвимость функции svg_parse_preserveaspectratio() компонента SVG Parser мультимедийной платформы GPAC, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 13%
0.00045
Низкий

4.3 Medium

CVSS3

6.5 Medium

CVSS3

Дефекты

CWE-404
CWE-401