CVE-2022-47657 - GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662

HIGH

GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662

Published Jan 5, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.35%

GPAC MP4Box 2.1-DEV-rev644-g5c4df2a67 is vulnerable to buffer overflow in function hevc_parse_vps_extension of media_tools/av_parsers.c:7662

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-50416		Advisory
https://github.com/gpac/gpac/issues/2355		ExploitIssue TrackingPatchThird Party Advisory
https://www.debian.org/security/2023/dsa-5411		vendor-advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Jan 5, 2023

Updated Apr 10, 2025

Reserved Dec 21, 2022

Updated Apr 10, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Jan 5, 2023

Updated Apr 10, 2025

Exploited since n/a