Skip to content
OpenAdvisories
High · 7.8 CVE-2022-43040 EUVD-2022-46089GHSA-j2wh-p8p3-9g26

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isome…

Published Oct 19, 2022 · Updated May 9, 2025 · Assigned by mitre

Description

GPAC 2.1-DEV-rev368-gfd054169b-master was discovered to contain a heap buffer overflow via the function gf_isom_box_dump_start_ex at /isomedia/box_funcs.c.

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu Pro 24.04 LTS gpac No fix yet —
Ubuntu Pro 22.04 LTS gpac No fix yet —
Ubuntu Pro 20.04 LTS gpac No fix yet —
Show 3 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 18.04 LTS gpac No fix yet —
Ubuntu Pro 16.04 LTS gpac No fix yet —
Ubuntu Pro 14.04 LTS gpac No fix yet —

References