CVE-2022-27145

MEDIUM

GPAC < 2.0.0 - Stack Overflow in gf_isom_get_sample_for_movie_time

Title source: llm

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a stack-overflow vulnerability in function gf_isom_get_sample_for_movie_time of mp4box.

Core 2

Core References

Exploit, Third Party Advisory

Third Party Advisory vendor-advisory

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 37.9%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-787

Status published

Products (1)

gpac/gpac < 2.0.0

Published Apr 08, 2022

Tracked Since Feb 18, 2026