← All advisories

Medium severity5.5NVD Advisory· Published Apr 20, 2022· Updated Jun 17, 2026

CVE-2022-29537

CVE-2022-29537

Description

gp_rtp_builder_do_hevc in ietf/rtp_pck_mpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Gpac/Gpac3 versions
cpe:2.3:a:gpac:gpac:2.0.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:gpac:gpac:2.0.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =2.0.0

Patches

Vulnerability mechanics

References

2

github.com/gpac/gpac/issues/2173nvdExploitIssue TrackingThird Party Advisory
www.debian.org/security/2023/dsa-5411nvd

News mentions

0

No linked articles in our index yet.