CVE-2022-3222

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2022-3222
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-3222.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2022-3222
Downstream
Published
2022-09-15T09:15:09Z
Modified
2025-10-15T13:59:51.833311Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

Uncontrolled Recursion in GitHub repository gpac/gpac prior to 2.1.0-DEV.

References

Affected packages

Git / github.com/gpac/gpac

Affected ranges

Type
GIT
Repo
https://github.com/gpac/gpac
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4e7736d7ec7bf64026daa611da951993bb42fdaf

Affected versions

v0.*

v0.5.2
v0.6.0
v0.6.1
v0.7.0
v0.7.1
v0.8.0
v0.9.0
v0.9.0-preview

v1.*

v1.0.0
v1.0.1

v2.*

v2.0.0

Database specific 

{
    "vanir_signatures": [
        {
            "id": "CVE-2022-3222-42e89bc0",
            "signature_type": "Function",
            "digest": {
                "function_hash": "152548751986668109417274184410288546179",
                "length": 1547.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFScript_Parse"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-474a309c",
            "signature_type": "Function",
            "digest": {
                "function_hash": "331879714757837856953181822884820835302",
                "length": 224.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFS_ObjectMethodCall"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-48ab3e29",
            "signature_type": "Function",
            "digest": {
                "function_hash": "69847878512898825380940233816501172956",
                "length": 4667.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFS_Expression"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-605efaec",
            "signature_type": "Function",
            "digest": {
                "function_hash": "226600477919031763394356863510355331846",
                "length": 149.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFS_ObjectMemberAccess"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-9e365ca3",
            "signature_type": "Function",
            "digest": {
                "function_hash": "172275504548231314228031913240702159344",
                "length": 243.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFS_Params"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-abe9c9df",
            "signature_type": "Function",
            "digest": {
                "function_hash": "279842356874121167819696679175520043901",
                "length": 196.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFS_CompoundExpression"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-b6b19dff",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "93769238099744293990574198912715688549",
                    "16684320883667779780013971939577848413",
                    "13072298173710837429753773568200234950",
                    "50541879380774993142739672171007633839",
                    "33276104114025004623049815024874060701",
                    "210853583799579189836368780277023469634",
                    "94631336103126635382413622747963789809",
                    "280984418119766336169488039905784538533",
                    "103170967453593120147266420566062394763",
                    "293438568397011078936074100343821016047",
                    "177985014262781139194749937369864210712",
                    "250576156544465753775039380778721018047",
                    "219372667083227401145305139722420048515",
                    "303812540082546093051596886458612772285",
                    "338603819803443728571811893303991060059",
                    "318832085323913735814264349366140489504",
                    "16994598366761745429161361977994238123",
                    "270078249550604817451002257052125643101",
                    "245472757462949721730415315070339662860",
                    "185785765132220708008654907469555567461",
                    "65721388308671627220147168382151911187",
                    "222618054502721725638777197626642343275",
                    "316561285708328677909305912452842599582",
                    "166270306270758212974837385069958252554",
                    "144459850437870475529715690875449241079",
                    "329950310141117932784977613599213419623",
                    "304448795037209233002277664030773741166",
                    "166603041506421331226812376042031418434",
                    "104903844227082796855862770858179051891",
                    "164288467698074160239761814844762931421",
                    "200481239083631202804246393130355294190",
                    "190893820073328000004020441037534841936",
                    "51797522576982673565082333415238392995",
                    "10583261046340493989089200654944509342",
                    "131747881299407650165638068874929380031",
                    "190893820073328000004020441037534841936",
                    "51797522576982673565082333415238392995",
                    "164387929061375942872070763895637349699",
                    "186588166416445651530534420185204589313",
                    "96703598782202191156498606356145342744",
                    "304234878585700073097275978320276652150",
                    "169487420722736817377997064744674500788"
                ]
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c"
            },
            "deprecated": false,
            "signature_version": "v1"
        },
        {
            "id": "CVE-2022-3222-e8a296ba",
            "signature_type": "Function",
            "digest": {
                "function_hash": "117029064440793121557232748519392208288",
                "length": 176.0
            },
            "source": "https://github.com/gpac/gpac/commit/4e7736d7ec7bf64026daa611da951993bb42fdaf",
            "target": {
                "file": "src/bifs/script_dec.c",
                "function": "SFS_ArrayDeref"
            },
            "deprecated": false,
            "signature_version": "v1"
        }
    ]
}