First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2022-47662

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

GPAC MP4Box 2.1-DEV-rev649-ga8f438d20 has a segment fault (/stack overflow) due to infinite recursion in Media_GetSample isomedia/media.c:662

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/gpac/gpac/issues/2359Exploit, Issue Tracking, Patch, Third Party Advisory
https://www.debian.org/security/2023/dsa-5411
https://github.com/gpac/gpac/issues/2359Exploit, Issue Tracking, Patch, Third Party Advisory
https://www.debian.org/security/2023/dsa-5411

Timeline

Published: Jan 5, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-476637.8GPAC MP4box 2.1-DEV-rev649-ga8f438d20 is vulnerable to buffer overflow in h263dmx_process filters/reframe_h263.c:609 CVE-2022-476647.8Libde265 1.0.9 is vulnerable to Buffer Overflow in ff_hevc_put_hevc_qpel_pixels_8_sse CVE-2022-476657.8Libde265 1.0.9 has a heap buffer overflow vulnerability in de265_image::set_SliceAddrRS(int, int, int)CVE-2022-47677.5Denial of Service in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-476737.8An issue was discovered in Binutils addr2line before 2.39.3, function parse_module contains multiple out of bound reads which may cause a de CVE-2022-47689.8A vulnerability was found in Dropbox merou. It has been classified as critical. Affected is the function add_public_key of the file grouper/CVE-2022-47694.3Hitachi Vantara Pentaho Business Analytics Server prior to versions 9.4.0.0 and 9.3.0.2, including 8.3.x display the target path on host whe CVE-2022-476957.8An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via functi CVE-2022-476967.8An issue was discovered Binutils objdump before 2.39.3 allows attackers to cause a denial of service or other unspecified impacts via functi CVE-2022-476979.8COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 and before is vulnerable to Account takeov CVE-2022-476986.1COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Cross Site Scripting (XSS CVE-2022-476999.8COMFAST (Shenzhen Sihai Zhonglian Network Technology Co., Ltd) CF-WR623N Router firmware V2.3.0.1 is vulnerable to Incorrect Access Control.