CVE-2022-3957

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-404 CWE-401

Affected software

Vendor	Product	Versions
unspecified	GPAC	n/a

References

https://github.com/gpac/gpac/commit/2191e66aa7df750e8ef01781b1930bea87b713bbPatch, Third Party Advisory
https://vuldb.com/?id.213463Permissions Required, Third Party Advisory, VDB Entry
https://www.debian.org/security/2023/dsa-5411
https://github.com/gpac/gpac/commit/2191e66aa7df750e8ef01781b1930bea87b713bbPatch, Third Party Advisory
https://vuldb.com/?id.213463Permissions Required, Third Party Advisory, VDB Entry
https://www.debian.org/security/2023/dsa-5411

Timeline

Published: Nov 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-39585.4Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permission CVE-2022-39595.3A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is some unknown functiona CVE-2022-39606.3Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.1 and 9.3.0.2, including 8.3.x cannot allow a system administrator CVE-2022-39616.5The Directorist WordPress plugin before 7.4.4 does not prevent users with low privileges (like subscribers) from accessing sensitive system CVE-2022-39624.3A content spoofing vulnerability was found in Kiali. It was discovered that Kiali does not implement error handling when the page or endpoin CVE-2022-39635.4A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of th CVE-2022-39648.1A vulnerability classified as problematic has been found in ffmpeg. This affects an unknown part of the file libavcodec/rpzaenc.c of the com CVE-2022-39658.1A vulnerability classified as problematic was found in ffmpeg. This vulnerability affects the function smc_encode_stream of the file libavco CVE-2022-39667.5A vulnerability, which was classified as critical, has been found in Ultimate Member Plugin up to 2.5.0. This issue affects the function loa CVE-2022-39677.8A vulnerability, which was classified as critical, was found in Vesta Control Panel. Affected is an unknown function of the file func/main.s CVE-2022-39686.1A vulnerability has been found in emlog and classified as problematic. Affected by this vulnerability is an unknown functionality of the fil CVE-2022-39695.5A vulnerability was found in OpenKM up to 6.3.11 and classified as problematic. Affected by this issue is the function getFileExtension of t