CVE-2022-3178

NameCVE-2022-3178
DescriptionBuffer Over-read in GitHub repository gpac/gpac prior to 2.1.0-DEV.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
gpac (PTS)bullseye (security), bullseye1.0.1+dfsg1-4+deb11u3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
gpacsource(unstable)(not affected)

Notes

- gpac <not-affected> (Fix for CVE-2022-30976 not applied)
https://huntr.dev/bounties/f022fc50-3dfd-450a-ab47-3d75d2bf44c0
https://github.com/gpac/gpac/commit/77510778516803b7f7402d7423c6d6bef50254c3
Introduced by the fix for CVE-2022-30976.

Search for package or bug name: Reporting problems