CVE-2022-3222

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-3222
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-3222.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-3222
Downstream
Published
2022-09-15T09:15:09Z
Modified
2025-10-21T07:06:56.350955Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.

References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type
GIT
Repo
https://github.com/gpac/gpac
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4e7736d7ec7bf64026daa611da951993bb42fdaf

Affected versions

v0.*

v0.5.2
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.8.0
v0.9.0
v0.9.0-preview

v1.*

v1.0.0
v1.0.1

v2.*

v2.0.0

Database specific

vanir_signatures

[
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFScript_Parse",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-42e89bc0",
        "signature_version": "v1",
        "digest": {
            "function_hash": "152548751986668109417274184410288546179",
            "length": 1547.0
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFS_ObjectMethodCall",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-474a309c",
        "signature_version": "v1",
        "digest": {
            "function_hash": "331879714757837856953181822884820835302",
            "length": 224.0
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFS_Expression",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-48ab3e29",
        "signature_version": "v1",
        "digest": {
            "function_hash": "69847878512898825380940233816501172956",
            "length": 4667.0
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFS_ObjectMemberAccess",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-605efaec",
        "signature_version": "v1",
        "digest": {
            "function_hash": "226600477919031763394356863510355331846",
            "length": 149.0
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFS_Params",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-9e365ca3",
        "signature_version": "v1",
        "digest": {
            "function_hash": "172275504548231314228031913240702159344",
            "length": 243.0
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFS_CompoundExpression",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-abe9c9df",
        "signature_version": "v1",
        "digest": {
            "function_hash": "279842356874121167819696679175520043901",
            "length": 196.0
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Line",
        "deprecated": false,
        "id": "CVE-2022-3222-b6b19dff",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "93769238099744293990574198912715688549",
                "16684320883667779780013971939577848413",
                "13072298173710837429753773568200234950",
                "50541879380774993142739672171007633839",
                "33276104114025004623049815024874060701",
                "210853583799579189836368780277023469634",
                "94631336103126635382413622747963789809",
                "280984418119766336169488039905784538533",
                "103170967453593120147266420566062394763",
                "293438568397011078936074100343821016047",
                "177985014262781139194749937369864210712",
                "250576156544465753775039380778721018047",
                "219372667083227401145305139722420048515",
                "303812540082546093051596886458612772285",
                "338603819803443728571811893303991060059",
                "318832085323913735814264349366140489504",
                "16994598366761745429161361977994238123",
                "270078249550604817451002257052125643101",
                "245472757462949721730415315070339662860",
                "185785765132220708008654907469555567461",
                "65721388308671627220147168382151911187",
                "222618054502721725638777197626642343275",
                "316561285708328677909305912452842599582",
                "166270306270758212974837385069958252554",
                "144459850437870475529715690875449241079",
                "329950310141117932784977613599213419623",
                "304448795037209233002277664030773741166",
                "166603041506421331226812376042031418434",
                "104903844227082796855862770858179051891",
                "164288467698074160239761814844762931421",
                "200481239083631202804246393130355294190",
                "190893820073328000004020441037534841936",
                "51797522576982673565082333415238392995",
                "10583261046340493989089200654944509342",
                "131747881299407650165638068874929380031",
                "190893820073328000004020441037534841936",
                "51797522576982673565082333415238392995",
                "164387929061375942872070763895637349699",
                "186588166416445651530534420185204589313",
                "96703598782202191156498606356145342744",
                "304234878585700073097275978320276652150",
                "169487420722736817377997064744674500788"
            ],
            "threshold": 0.9
        }
    },
    {
        "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
        "target": {
            "function": "SFS_ArrayDeref",
            "file": "src/bifs/script_dec.c"
        },
        "signature_type": "Function",
        "deprecated": false,
        "id": "CVE-2022-3222-e8a296ba",
        "signature_version": "v1",
        "digest": {
            "function_hash": "117029064440793121557232748519392208288",
            "length": 176.0
        }
    }
]