Vulnerabilities > CVE-2022-24249 - NULL Pointer Dereference vulnerability in Gpac

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

local

low complexity

gpac

CWE-476

NVD

Published: 2022-02-04

Updated: 2024-11-21

Summary

A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.

Vulnerable Configurations

Part	Description	Count
Application	Gpac Gpac Gpac - Gpac Gpac 0.5.2 Gpac Gpac 0.6.0 Gpac Gpac 0.6.1 Gpac Gpac 0.7.0 Gpac Gpac 0.7.1 Gpac Gpac 0.8.0 Gpac Gpac 0.9.0 Gpac Gpac 0.9.0-Development-20191109 Gpac Gpac 1.0 Gpac Gpac 1.0.1 Gpac Gpac 1.1.0 Gpac Gpac 1.1.0-Dev-Rev1663-G881C6A94A-Master Gpac Gpac 1.1.0-Dev-Rev1727-G8Be34973D-Master Gpac Gpac 1.1.0-Dev-Rev1759-Geb2D1E6Dd Gpac Gpac 2.0 Gpac Gpac 2.0.0	20

Common Weakness Enumeration (CWE)

CWE-476 - NULL Pointer Dereference

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References