CVEvulnerability

CVE-2022-2122

7.8 HIGH Published 2022-07-19 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-07-19
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-122, CWE-190, CWE-787

Description

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.

Affected configurations

• gstreamer gstreamer (< 1.20.3) • debian debian linux 10.0 • debian debian linux 11.0

Related

Weakness · CWE (3)

  • CWE-122 Heap-based Buffer Overflow weakness
  • CWE-190 Integer Overflow or Wraparound weakness
  • CWE-787 Out-of-bounds Write weakness

References