Buffer Overflow The advisory has been revoked - it doesn't affect any version of package gpac  (opens in a new tab)


Threat Intelligence

EPSS
0.1% (42nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-DEBIAN11-GPAC-3227412
  • published9 Jan 2023
  • disclosed5 Jan 2023

Introduced: 5 Jan 2023

CVE-2022-47658  (opens in a new tab)
CWE-120  (opens in a new tab)

Amendment

The Debian security team deemed this advisory irrelevant for Debian:11.

NVD Description

Note: Versions mentioned in the description apply only to the upstream gpac package and not the gpac package as distributed by Debian.

GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function gf_hevc_read_vps_bs_internal of media_tools/av_parsers.c:8039