CVE-2022-1035

MEDIUM

Gpac < 2.0 - NULL Pointer Dereference

Title source: rule

Segmentation Fault caused by MP4Box -lsr in GitHub repository gpac/gpac prior to 2.1.0-DEV.

Core 3

Core References

Third Party Advisory vendor-advisory

Patch, Third Party Advisory

Exploit, Patch, Third Party Advisory

CVSS v3 5.5

EPSS 0.0009

EPSS Percentile 25.7%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-476

Status published

Products (1)

gpac/gpac < 2.0

Published Mar 21, 2022

Tracked Since Feb 18, 2026