← All advisories

High severity7.8NVD Advisory· Published Mar 12, 2022· Updated Jun 17, 2026

CVE-2022-26967

CVE-2022-26967

Description

GPAC 2.0 allows a heap-based buffer overflow in gf_base64_encode. It can be triggered via MP4Box.

Affected products

3

Gpac/Gpac3 versions
cpe:2.3:a:gpac:gpac:2.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gpac:gpac:2.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: <2.0

Patches

Vulnerability mechanics

References

2

github.com/gpac/gpac/issues/2138nvdExploitPatchThird Party Advisory
www.debian.org/security/2023/dsa-5411nvd

News mentions

0

No linked articles in our index yet.