CVE-2022-36191: Gpac

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

A heap-buffer-overflow had occurred in function gf_isom_dovi_config_get of isomedia/avc_ext.c:2490, as demonstrated by MP4Box. This vulnerability was fixed in commit fef6242.

Affected products

• Gpac Gpac: before 2.2.0 (fixed in 2.2.0)

Published 2022-08-17. Last modified 2026-06-17.