CVE-2022-26967

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Mar 12, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-269699.8In Directus before 9.7.0, the default settings of CORS_ORIGIN and CORS_ENABLED are true.CVE-2022-26977.5A vulnerability was found in SourceCodester Simple E-Learning System. It has been classified as critical. Affected is an unknown function ofCVE-2022-269715.3Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. CVE-2022-269726.1Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL CVE-2022-269735.3Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. CVE-2022-269746.1Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of CVE-2022-269757.5Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.CVE-2022-269765.4Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. CVE-2022-269776.1Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. CVE-2022-269786.1Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. TCVE-2022-269797.5Foxit PDF Reader before 12.0.1 and PDF Editor before 12.0.1 allow a NULL pointer dereference when this.Span is used for oState of Collab.addCVE-2022-26989.8A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as critical. Affected by this vulnerability is an
CVE-2022-26967: High severity, CVSS 7.8 | Vulnix