vulnerability

Debian: CVE-2022-36190: gpac -- security update

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:C/I:C/A:C)

Published

Aug 17, 2022

Added

May 29, 2023

Modified

Mar 30, 2026

Description

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.

Solution

debian-upgrade-gpac

References

CVE-2022-36190
https://attackerkb.com/topics/CVE-2022-36190
CWE-416
DEBIAN-DSA-5411
DEBIAN-DSA-5411-1
EUVD-EUVD-2022-38909
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38909

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report