CVE-2022-2566

A heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a small allocation with `av_calloc()`. An attacker can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfcce3cf6a87c3e6e05

• CWE-122
• CWE-190

• https://github.com/FFmpeg/FFmpeg/commit/c953baa084607dd1d84c3bfcce3cf6a87c3e6e05Patch, Third Party Advisory
• https://github.com/FFmpeg/FFmpeg/commit/c953baa084607dd1d84c3bfcce3cf6a87c3e6e05Patch, Third Party Advisory

Published

Sep 23, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25654Memory corruption in kernel due to improper input validation…6.7
• CVE-2022-25655Memory corruption in WLAN HAL while arbitrary value is passe…7.8
• CVE-2022-25656Possible integer overflow and memory corruption due to impro…7.8
• CVE-2022-25657Memory corruption due to buffer overflow occurs while proces…9.8
• CVE-2022-25658Memory corruption due to incorrect pointer arithmetic when a…9.8
• CVE-2022-25659Memory corruption due to buffer overflow while parsing MKV c…9.8
• CVE-2022-25660Memory corruption due to double free issue in kernel in Snap…7.8
• CVE-2022-25661Memory corruption due to untrusted pointer dereference in ke…7.8
• CVE-2022-25662Information disclosure due to untrusted pointer dereference …7.5
• CVE-2022-25663Possible buffer overflow due to lack of buffer length check …5.5
• CVE-2022-25664Information disclosure due to exposure of information while …5.5
• CVE-2022-25665Information disclosure due to buffer over read in kernel in …7.1