CVE-2022-24249

gpac/gpac

on github

Published

February 4, 2022

Severity

CVSS v3:

5.5 MEDIUM

CVSS v2:

4.3 MEDIUM

Description

A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.

References

https://github.com/gpac/gpac/issues/2081

Configurations

CPE23	Version Start	Version End	Exact Version
cpe:2.3:a:gpac:gpac:1.1.0:::::::*	n/a	n/a	1.1.0
cpe:2.3:a:gpac:gpac::::::::	n/a	2.0.0	*

External Links

NVD - CVE-2022-24249