ZeroHour

CVE-2022-2122

PoC
CVSS 3.1
7.8 high
EPSS
<1%p38
Published
()
Modified
Description

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.

Vendors
gstreamerdebian
Products
gstreamer, debian linux
Weakness
CWE-122, CWE-190, CWE-787
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.