CVE catalog

CVE-2022-24249

UBUNTU-CVE-2022-24249

[CVE catalog]

Severity
Unknown
Published
Updated
Source
[NVD] · [CVE record]
EPSS
0.61% · Oct 25, 2026

A Null Pointer Dereference vulnerability exists in GPAC 1.1.0 via the xtra_box_write function in /box_code_base.c, which causes a Denial of Service. This vulnerability was fixed in commit 71f9871.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Ubuntugpacpro0.5.0+svn4288~dfsg1-1ubuntu1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1+esm1vulnerable
Ubuntugpacpro0.5.0+svn4288~dfsg1-4ubuntu1+esm2vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1build1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-1ubuntu0.1+esm2vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-3ubuntu0.1+esm1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-4ubuntu1vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-5vulnerable
Ubuntugpacpro0.5.2-426-gc5ad4e4+dfsg5-5ubuntu0.1~esm2vulnerable
Ubuntugpacpro1.0.1+dfsg1-4vulnerable
Ubuntugpacpro1.0.1+dfsg1-5vulnerable
Ubuntugpacpro2.0.0+dfsg1-2vulnerable
Ubuntugpacpro2.0.0+dfsg1-2ubuntu0.1~esm2vulnerable
Ubuntugpacpro2.2.1+dfsg1-3vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1build1vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1build2vulnerable
Ubuntugpacpro2.2.1+dfsg1-3.1ubuntu0.1~esm2vulnerable

Fixed-version evidence

OpenFactory catalog packages

No matching packages in this catalog.

Observed:

References

[FIRST EPSS] · [OSV Package Vulnerability Database]