CVE-2022-1035

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

Vendor	Product	Versions
gpac	gpac/gpac	>= unspecified, < 2.1.0-DEV

References

https://github.com/gpac/gpac/commit/3718d583c6ade191dc7979c64f48c001ca6f0243Patch, Third Party Advisory
https://huntr.dev/bounties/851942a4-1d64-4553-8fdc-9fccd167864bExploit, Patch, Third Party Advisory
https://www.debian.org/security/2023/dsa-5411
https://github.com/gpac/gpac/commit/3718d583c6ade191dc7979c64f48c001ca6f0243Patch, Third Party Advisory
https://huntr.dev/bounties/851942a4-1d64-4553-8fdc-9fccd167864bExploit, Patch, Third Party Advisory
https://www.debian.org/security/2023/dsa-5411

Timeline

Published: Mar 21, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10367.5Able to create an account with long password leads to memory corruption / Integer Overflow in GitHub repository microweber/microweber prior CVE-2022-10377.2The EXMAGE WordPress plugin before 1.0.7 does to ensure that images added via URLs are external images, which could lead to a blind SSRF iss CVE-2022-10387.8A potential security vulnerability has been identified in the HP Jumpstart software, which might allow escalation of privilege. HP is recomm CVE-2022-10399.8The weak password on the web user interface can be exploited via HTTP or HTTPS. Once such access has been obtained, the other passwords can CVE-2022-10409.8An authentication bypass vulnerability in the User Portal and Webadmin allows a remote attacker to execute code in Sophos Firewall version v CVE-2022-10418.8In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.CVE-2022-10428.8In Zephyr bluetooth mesh core stack, an out-of-bound write vulnerability can be triggered during provisioning.CVE-2022-10438.8A flaw was found in the Linux kernel’s io_uring implementation. This flaw allows an attacker with a local account to corrupt system memory, CVE-2022-10446.5Sensitive Data Exposure Due To Insecure Storage Of Profile Image in GitHub repository polonel/trudesk prior to v1.2.1.CVE-2022-10455.4Stored XSS viva .svg file upload in GitHub repository polonel/trudesk prior to v1.2.0.CVE-2022-10464.8The Visual Form Builder WordPress plugin before 3.0.7 does not sanitise and escape the form's 'Email to' field , which could allow high priv CVE-2022-10476.1The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in