CVE-2022-1222
published 2022-04-04CVE-2022-1222: Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
PriorityP416medium5.5CVSS 3.1
AVLACLPRNUIRSUCNINAH
EPSS
0.82%
53.5th percentile
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | gpac | < gpac 1.0.1+dfsg1-4+deb11u2 (bullseye) | gpac 1.0.1+dfsg1-4+deb11u2 (bullseye) |
| chrome_chrome | — | — | |
| gpac | gpac | <= 2.0 | — |
| gpac | gpac | >= 0 < 1.0.1+dfsg1-4+deb11u2 | 1.0.1+dfsg1-4+deb11u2 |
| gpac | gpac_gpac | >= unspecified < 2.1.0-DEV | 2.1.0-DEV |
CVSS provenance
nvdv3.15.5MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
nvdv3.04.0MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv5.5MEDIUM
vendor_debian5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Chrome
Stable Channel Update for Desktop: CVE-2023-1222
vendor_chrome·2023-03-07·CVSS 8.8
CVE-2023-1222 [MEDIUM] Stable Channel Update for Desktop: CVE-2023-1222
Stable Channel Update for Desktop
CVE-2023-1222: Heap buffer overflow in Web Audio API. Reported by Cassidy Kim(@cassidy6564) on 2022-12-24 [$5000][ 1398579 ] Medium CVE-2023-1223: Insufficient policy enforcement in Autofill
Reported by Ahmed ElMasry on 2022-12-07 [$5000][ 1403539 ] Medium CVE-2023-1224: Insufficient policy enforcement in Web Payments API
Severity: medium
Debian
CVE-2022-1222: gpac - Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
vendor_debian·2022·CVSS 5.5
CVE-2022-1222 [MEDIUM] CVE-2022-1222: gpac - Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
Scope: local
bullseye: resolved (fixed in 1.0.1+dfsg1-4+deb11u2)
GHSA
GHSA-wwh4-wjhp-4xrg: Inf loop in GitHub repository gpac/gpac prior to 2
ghsa_unreviewed·2022-04-05
CVE-2022-1222 [MEDIUM] CWE-835 GHSA-wwh4-wjhp-4xrg: Inf loop in GitHub repository gpac/gpac prior to 2
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
OSV
CVE-2022-1222: Inf loop in GitHub repository gpac/gpac prior to 2
osv·2022-04-04·CVSS 5.5
CVE-2022-1222 [MEDIUM] CVE-2022-1222: Inf loop in GitHub repository gpac/gpac prior to 2
Inf loop in GitHub repository gpac/gpac prior to 2.1.0-DEV.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/gpac/gpac/commit/7f060bbb72966cae80d6fee338d0b07fa3fc06e1https://huntr.dev/bounties/f8cb85b8-7ff3-47f1-a9a6-7080eb371a3dhttps://www.debian.org/security/2023/dsa-5411https://github.com/gpac/gpac/commit/7f060bbb72966cae80d6fee338d0b07fa3fc06e1https://huntr.dev/bounties/f8cb85b8-7ff3-47f1-a9a6-7080eb371a3dhttps://www.debian.org/security/2023/dsa-5411
2022-04-04
Published