vulnerability

Red Hat: CVE-2022-2122: Potential heap overwrite in mp4 demuxing using zlib decompression (Multiple Advisories)

Name: Red Hat: CVE-2022-2122: Potential heap overwrite in mp4 demuxing using zlib decompression (Multiple Advisories)
Creator: Red Hat
Published: 2022-07-19T00:00:00.000Z
Keywords: CVE, CWE-122, CWE-190, CWE-787, Red Hat, 2022, 2122, Potential heap overwrite in mp4 demuxing using zlib decompression (Multiple Advisories), redhat-upgrade-gstreamer1-plugins-good, redhat-upgrade-gstreamer1-plugins-good-debuginfo, redhat-upgrade-gstreamer1-plugins-good-debugsource, redhat-upgrade-gstreamer1-plugins-good-gtk, redhat-upgrade-gstreamer1-plugins-good-gtk-debuginfo, redhat-upgrade-gstreamer1-plugins-good-qt-debuginfo, Severity 7

Try Surface Command

Back to search

Severity

CVSS

(AV:L/AC:M/Au:N/C:C/I:C/A:C)

Published

Jul 19, 2022

Added

May 15, 2023

Modified

Jun 12, 2026

Description

A flaw was found in GStreamer. An integer overflow can lead to a heap-based buffer overflow in the qt demuxer when processing a specially crafted QuickTime/MP4 file using zlib decompression. This vulnerability can result in application crash, memory corruption, and code execution.

Solutions

redhat-upgrade-gstreamer1-plugins-goodredhat-upgrade-gstreamer1-plugins-good-debuginforedhat-upgrade-gstreamer1-plugins-good-debugsourceredhat-upgrade-gstreamer1-plugins-good-gtkredhat-upgrade-gstreamer1-plugins-good-gtk-debuginforedhat-upgrade-gstreamer1-plugins-good-qt-debuginfo

References

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report