CVE-2022-1441: Buffer Overflow
MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function diSTboxread() to read from video. In this function, it allocates a buffer str with fixed length. However, content read from bs is controllable by user, so is the length, which causes a buffer overflow.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1441?
CVE-2022-1441 has been classified with medium severity due to potential buffer overflow risks.
How do I fix CVE-2022-1441?
To fix CVE-2022-1441, update to GPAC version 2.0.0 or later, or apply the necessary patches provided in your package manager.
What software is affected by CVE-2022-1441?
CVE-2022-1441 affects GPAC version 2.0.0 and other versions prior to specific remedial updates.
What component of GPAC is vulnerable in CVE-2022-1441?
The vulnerability in CVE-2022-1441 occurs in the MP4Box component of GPAC.
Is CVE-2022-1441 exploitable remotely?
Yes, CVE-2022-1441 could potentially be exploited remotely if an attacker can feed malicious MP4 files to the affected system.