CVE-2022-3957

A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio of the file scenegraph/svg_attributes.c of the component SVG Parser. The manipulation leads to memory leak. The attack can be launched remotely. The name of the patch is 2191e66aa7df750e8ef01781b1930bea87b713bb. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-213463.

• CWE-404
• CWE-401

• https://github.com/gpac/gpac/commit/2191e66aa7df750e8ef01781b1930bea87b713bbPatch, Third Party Advisory
• https://vuldb.com/?id.213463Permissions Required, Third Party Advisory, VDB Entry
• https://www.debian.org/security/2023/dsa-5411
• https://github.com/gpac/gpac/commit/2191e66aa7df750e8ef01781b1930bea87b713bbPatch, Third Party Advisory
• https://vuldb.com/?id.213463Permissions Required, Third Party Advisory, VDB Entry
• https://www.debian.org/security/2023/dsa-5411

Published

Nov 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3949A vulnerability, which was classified as problematic, has be…6.1
• CVE-2022-3950A vulnerability, which was classified as problematic, was fo…6.1
• CVE-2022-3952A vulnerability has been found in ManyDesigns Portofino 5.3.…7.1
• CVE-2022-3953Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2022-3955A vulnerability was found in tholum crm42. It has been rated…9.8
• CVE-2022-3956A vulnerability classified as critical has been found in tsr…9.8
• CVE-2022-3958Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSid…5.4
• CVE-2022-3959A vulnerability, which was classified as problematic, has be…5.3
• CVE-2022-3960 Hitachi Vantara Pentaho Business Analytics Server prior to …6.3
• CVE-2022-3961The Directorist WordPress plugin before 7.4.4 does not preve…6.5
• CVE-2022-3962A content spoofing vulnerability was found in Kiali. It was …4.3
• CVE-2022-3963A vulnerability was found in gnuboard5. It has been classifi…5.4