CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-47660
https://notcve.org/view.php?id=CVE-2022-47660
GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is has an integer overflow in isomedia/isom_write.c • https://github.com/gpac/gpac/issues/2357 https://www.debian.org/security/2023/dsa-5411 • CWE-190: Integer Overflow or Wraparound •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-46489
https://notcve.org/view.php?id=CVE-2022-46489
GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the gf_isom_box_parse_ex function at box_funcs.c. • https://github.com/gpac/gpac/issues/2328 • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-47094
https://notcve.org/view.php?id=CVE-2022-47094
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b is vulnerable to Null pointer dereference via filters/dmx_m2ts.c:343 in m2tsdmx_declare_pid • https://github.com/gpac/gpac/issues/2345 https://www.debian.org/security/2023/dsa-5411 • CWE-476: NULL Pointer Dereference •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-46490
https://notcve.org/view.php?id=CVE-2022-46490
GPAC version 2.1-DEV-rev505-gb9577e6ad-master was discovered to contain a memory leak via the afrt_box_read function at box_code_adobe.c. • https://github.com/gpac/gpac/issues/2327 • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-47087
https://notcve.org/view.php?id=CVE-2022-47087
GPAC MP4box 2.1-DEV-rev574-g9d5bb184b has a Buffer overflow in gf_vvc_read_pps_bs_internal function of media_tools/av_parsers.c • https://github.com/gpac/gpac/issues/2339 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •