What’s Vulnerable › Vulnerabilities

CVE-2022-29339

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-05-05 · updated 2026-06-17
• Weakness: CWE-617

Description

In GPAC 2.1-DEV-rev87-g053aae8-master, function BS_ReadByte() in utils/bitstream.c has a failed assertion, which causes a Denial of Service. This vulnerability was fixed in commit 9ea93a2.

Affected products

• GPAC: before 2022-04-12 — fixed in 2022-04-12

How to fix

Upgrade to a fixed version: GPAC 2022-04-12. Check the vendor advisory for mitigations.

References

• https://github.com/gpac/gpac/commit/9ea93a2ec8f555ceed1ee27294cf94822f14f10f
• https://github.com/gpac/gpac/issues/2165
• https://github.com/gpac/gpac/commit/9ea93a2ec8f555ceed1ee27294cf94822f14f10f
• https://github.com/gpac/gpac/issues/2165

Get alerted when CVE-2022-29339 or the next vulnerability affects your stack