CVE Vulnerabilities

CVE-2022-36186

NULL Pointer Dereference

Published: Aug 17, 2022 | Modified: Nov 21, 2024
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

A Null Pointer dereference vulnerability exists in GPAC 2.1-DEV-revUNKNOWN-master via the function gf_filter_pid_set_property_full () at filter_core/filter_pid.c:5250,which causes a Denial of Service (DoS). This vulnerability was fixed in commit b43f9d1.

Weakness

The product dereferences a pointer that it expects to be valid but is NULL.

Affected Software

NameVendorStart VersionEnd Version
GpacGpac2.1-dev (including)2.1-dev (including)
GpacUbuntubionic*
GpacUbuntufocal*
GpacUbuntukinetic*
GpacUbuntulunar*
GpacUbuntutrusty*
GpacUbuntutrusty/esm*
GpacUbuntuxenial*

Potential Mitigations

References