Vulnerabilities > CVE-2022-43040 - Out-of-bounds Write vulnerability in Gpac

CVSS 7.8 - HIGH

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

local

low complexity

gpac

CWE-787

NVD

Published: 2022-10-19

Updated: 2023-05-05

Summary

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c.

Vulnerable Configurations

Part	Description	Count
Application	Gpac Gpac Gpac 0.5.2 Gpac Gpac 1.1.0-Dev-Rev1663-G881C6A94A-Master Gpac Gpac 1.1.0-Dev-Rev1727-G8Be34973D-Master Gpac Gpac 1.1.0-Dev-Rev1759-Geb2D1E6Dd Gpac Gpac 2.1 Gpac Gpac 2.1-Dev-Rev87-G053Aae8-Master Gpac Gpac 2.1-Dev-Rev368-Gfd054169B-Master Gpac Gpac 2.1-Dev-Rev428-Gcb8Ae46C8-Master Gpac Gpac 2.1-Dev-Rev478-G696E6F868-Master Gpac Gpac 2.1-Dev-Rev490-G68064E101-Master Gpac Gpac 2.1-Dev-Rev593-G007Bf61A0	11

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://github.com/gpac/gpac/issues/2280