CVE-2022-4202

A vulnerability, which was classified as problematic, was found in GPAC 2.1-DEV-rev490-g68064e101-master. Affected is the function lsr_translate_coords of the file laser/lsr_dec.c. The manipulation leads to integer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The name of the patch is b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908. It is recommended to apply a patch to fix this issue. VDB-214518 is the identifier assigned to this vulnerability.

• CWE-189

• https://drive.google.com/file/d/1HVWa6IpAbvsMS5rx091RfjUB4GfXrMLE/viewExploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908Patch, Third Party Advisory
• https://github.com/gpac/gpac/issues/2333Exploit, Patch, Third Party Advisory
• https://vuldb.com/?id.214518Third Party Advisory
• https://www.debian.org/security/2023/dsa-5411
• https://drive.google.com/file/d/1HVWa6IpAbvsMS5rx091RfjUB4GfXrMLE/viewExploit, Third Party Advisory
• https://github.com/gpac/gpac/commit/b3d821c4ae9ba62b3a194d9dcb5e99f17bd56908Patch, Third Party Advisory
• https://github.com/gpac/gpac/issues/2333Exploit, Patch, Third Party Advisory
• https://vuldb.com/?id.214518Third Party Advisory
• https://www.debian.org/security/2023/dsa-5411

Published

Nov 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42004In FasterXML jackson-databind before 2.13.4, resource exhaus…7.5
• CVE-2022-42009SpringEL injection in the server agent in Apache Ambari vers…8.8
• CVE-2022-4201A blind SSRF in GitLab CE/EE affecting all from 11.3 prior t…5.3
• CVE-2022-42010An issue was discovered in D-Bus before 1.12.24, 1.13.x and …6.5
• CVE-2022-42011An issue was discovered in D-Bus before 1.12.24, 1.13.x and …6.5
• CVE-2022-42012An issue was discovered in D-Bus before 1.12.24, 1.13.x and …6.5
• CVE-2022-42021Best Student Result Management System v1.0 is vulnerable to …9.8
• CVE-2022-42029Chamilo 1.11.16 is affected by an authenticated local file i…8.8
• CVE-2022-4203A read buffer overrun can be triggered in X.509 certificate …4.9
• CVE-2022-42034Wedding Planner v1.0 is vulnerable to arbitrary code executi…8.8
• CVE-2022-42036The d8s-urls package for Python, as distributed on PyPI, inc…9.8
• CVE-2022-42037The d8s-asns package for Python, as distributed on PyPI, inc…9.8