CVE-2022-1172 - log back

CVE-2022-1172 created at 06 Apr 2022 12:59:59
Severity
+ Medium
Remote
+ Unknown
Type
+ Unknown
Description
+ Null Pointer Dereference Caused Segmentation Fault in gpac prior to 2.1.0-DEV
References
+ https://github.com/gpac/gpac/commit/55a183e6b8602369c04ea3836e05436a79fbc7f8
+ https://github.com/gpac/gpac/issues/2153
+ https://huntr.dev/bounties/a26cb79c-9257-4fbf-98c5-a5a331efa264/
Notes
+ needs more research
+
+ https://github.com/gpac/gpac/blame/55a183e6b8602369c04ea3836e05436a79fbc7f8/src/bifs/field_decode.c#L208 suggests since at least 16 years