CVE-2022-29340: Null Pointer Dereference
GPAC 2.1-DEV-rev87-g053aae8-master. has a Null Pointer Dereference vulnerability in gfisomparsemovieboxesinternal due to improper return value handling of GFSKIPBOX, which causes a Denial of Service. This vulnerability was fixed in commit 37592ad.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
GPACto a version that resolves this vulnerability.Patch 37592ad
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29340?
CVE-2022-29340 is categorized as a Denial of Service vulnerability due to a Null Pointer Dereference.
How do I fix CVE-2022-29340?
To fix CVE-2022-29340, users should upgrade to a version of GPAC released after commit 37592ad.
What is the impact of CVE-2022-29340?
The impact of CVE-2022-29340 is a potential Denial of Service that can disrupt normal application functionality.
Which versions of GPAC are affected by CVE-2022-29340?
GPAC versions prior to 2022-04-12 are affected by CVE-2022-29340.
Where can I find more details about CVE-2022-29340?
More details about CVE-2022-29340 can be found in the commit history of the GPAC GitHub repository.