CVE-2022-2122
PoC —CVSS 3.1
7.8 high
EPSS
<1%p38
Published
()
Modified
Description
DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.
In the news0 stories
No ingested article mentions this CVE yet.