CVE-2022-3222 - Vulnerability Details - OpenCVE

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

Attack Vector Network

Attack Complexity High

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction Required

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Gpac	Gpac

Configuration 1 [-]

OR	cpe:2.3:a:gpac:gpac::::::::
	cpe:2.3:a:gpac:gpac:2.1:dev::::::

No data.

References

Link	Providers
https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf
https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235
https://www.debian.org/security/2023/dsa-5411

History

Sat, 12 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00063}`	epss `{'score': 0.00067}`

MITRE

Status: PUBLISHED

Assigner: @huntrdev

Published: 2022-09-15T00:00:00

Updated: 2024-08-03T01:00:10.585Z

Reserved: 2022-09-15T00:00:00

Link: CVE-2022-3222

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-09-15T09:15:09.723

Modified: 2024-11-21T07:19:05.163

Link: CVE-2022-3222

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gpac:gpac:*:*:*:*:*:*:*:*", "matchCriteriaId": "6D5313BE-5EA3-458F-B779-5A941BBCBD55", "versionEndExcluding": "2.1", "vulnerable": true}, {"criteria": "cpe:2.3:a:gpac:gpac:2.1:dev:*:*:*:*:*:*", "matchCriteriaId": "2963671B-FA29-45DB-80B0-92F9E55F5159", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV."}, {"lang": "es", "value": "Una Recursi\u00f3n no Controlada en el repositorio de GitHub gpac/gpac versiones anteriores a 2.1.0-DEV"}], "id": "CVE-2022-3222", "lastModified": "2024-11-21T07:19:05.163", "metrics": {"cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "security@huntr.dev", "type": "Secondary"}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-15T09:15:09.723", "references": [{"source": "security@huntr.dev", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf"}, {"source": "security@huntr.dev", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235"}, {"source": "security@huntr.dev", "url": "https://www.debian.org/security/2023/dsa-5411"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Third Party Advisory"], "url": "https://huntr.dev/bounties/b29c69fa-3eac-41e4-9d4f-d861aba18235"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.debian.org/security/2023/dsa-5411"}], "sourceIdentifier": "security@huntr.dev", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-674"}], "source": "security@huntr.dev", "type": "Secondary"}]}