CVE-2022-2122

State
Published
Severity
Not scored
Published
Jul 19, 2022
Updated
Aug 3, 2024
Reserved
Jun 17, 2022

Read the record on cve.org

Description

DOS / potential heap overwrite in qtdemux using zlib decompression. Integer overflow in qtdemux element in qtdemux_inflate function which causes a segfault, or could cause a heap overwrite, depending on libc and OS. Depending on the libc used, and the underlying OS capabilities, it could be just a segfault or a heap overwrite.

Scores

The record has no CVSS score.

Weaknesses

Affected Products

ProductVersions
GStreamern/a
  • 1.20.3Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.