What’s Vulnerable › Vulnerabilities

CVE-2022-37416

• Severity: medium (CVSS 6.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-05 · updated 2026-06-17

Description

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.

Affected products

• Ittiam Libmpeg2: before 2022-07-27 — fixed in 2022-07-27

How to fix

Upgrade to a fixed version: Ittiam Libmpeg2 2022-07-27. Check the vendor advisory for mitigations.

References

• https://android-review.googlesource.com/c/platform/external/libmpeg2/+/2132593
• https://issuetracker.google.com/issues/231026247
• https://android-review.googlesource.com/c/platform/external/libmpeg2/+/2132593
• https://issuetracker.google.com/issues/231026247

Get alerted when CVE-2022-37416 or the next vulnerability affects your stack