CVE-2022-30976

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated…

published May 18, 2022

CVSS
—
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated by MP4Box.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00865 · 58.2th percentile
Published
2022-05-18T05:20Z
EPSS history
Timeline
  • 18 MAY 05:20Z
    GPAC 2.0.0 misuses a certain Unicode utf8_wcslen (renamed gf_utf8_wcslen) function in utils/utf.c, resulting in a heap-based buffer over-read, as demonstrated…
    cvelistv5