CVE-2022-27147

MEDIUM

GPAC < 2.0.0 - Use-After-Free in gf_node_get_attribute_by_tag

Title source: llm

GPAC mp4box 1.1.0-DEV-rev1727-g8be34973d-master has a use-after-free vulnerability in function gf_node_get_attribute_by_tag.

Core 2

Core References

Exploit, Third Party Advisory

Third Party Advisory vendor-advisory

CVSS v3 5.5

EPSS 0.0015

EPSS Percentile 35.1%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE

CWE-416

Status published

Products (1)

gpac/gpac < 2.0.0

Published Apr 08, 2022

Tracked Since Feb 18, 2026