Vulnerabilities > CVE-2022-36190 - Use After Free vulnerability in Gpac

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

gpac

CWE-416

critical

NVD

Published: 2022-08-17

Updated: 2023-05-27

Summary

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.

Vulnerable Configurations

Part	Description	Count
Application	Gpac Gpac Gpac - Gpac Gpac 0.5.2 Gpac Gpac 0.6.0 Gpac Gpac 0.6.1 Gpac Gpac 0.7.0 Gpac Gpac 0.7.1 Gpac Gpac 0.8.0 Gpac Gpac 0.9.0 Gpac Gpac 0.9.0-Development-20191109 Gpac Gpac 1.0 Gpac Gpac 1.0.1 Gpac Gpac 1.1.0 Gpac Gpac 1.1.0-Dev-Rev1727-G8Be34973D-Master Gpac Gpac 1.1.0-Dev-Rev1759-Geb2D1E6Dd Gpac Gpac 2.0 Gpac Gpac 2.0.0 Gpac Gpac 2.1 Gpac Gpac 2.1-Dev-Rev87-G053Aae8-Master Gpac Gpac 2.1-Dev-Rev428-Gcb8Ae46C8-Master Gpac Gpac 2.1-Dev-Rev478-G696E6F868-Master Gpac Gpac 2.1-Dev-Rev490-G68064E101-Master Gpac Gpac 2.2-Rev0-Gab012Bbfb-Master	25

Common Weakness Enumeration (CWE)

CWE-416 - Use After Free

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References