CVE-2022-36190: Gpac

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

GPAC mp4box 2.1-DEV-revUNKNOWN-master has a use-after-free vulnerability in function gf_isom_dovi_config_get. This vulnerability was fixed in commit fef6242.

Affected products

• Gpac Gpac: before 2.2.0 (fixed in 2.2.0)

Published 2022-08-17. Last modified 2026-06-17.