CVE-2022-4202

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the file laser/lsr_dec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908. It is recommended to apply a patch to fix this issue. VDB-214518 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-189

Affected software

No affected versions have been published.

Timeline

Published
Nov 29, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-420219.8Best Student Result Management System v1.0 is vulnerable to SQL Injection via /upresult/upresult/notice-details.php?nid=.CVE-2022-420298.8Chamilo 1.11.16 is affected by an authenticated local file inclusion vulnerability which allows authenticated users with access to 'big fileCVE-2022-42034.9A read buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs afCVE-2022-420348.8Wedding Planner v1.0 is vulnerable to arbitrary code execution via users_profile.php.CVE-2022-420369.8The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdooCVE-2022-420379.8The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdooCVE-2022-420389.8The d8s-ip-addresses package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. TheCVE-2022-420399.8The d8s-lists package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoCVE-2022-420409.8The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The bCVE-2022-420419.8The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The CVE-2022-420429.8The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The bCVE-2022-420439.8The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor
CVE-2022-4202: High severity, CVSS 8.8 | Vulnix