{"action":"Upgrade gpac to 1.0.1+dfsg1-4+deb11u2 or later.","affected":[{"fixed":"1.0.1+dfsg1-4+deb11u2","introduced":"0"}],"component":"gpac","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:11","exploited":false,"fixed_versions":["1.0.1+dfsg1-4+deb11u2"],"id":"tcs_01M5NGCF9F52Z3C9T4AZV88B41","modified_at":"2026-08-27T23:04:16.543244967Z","published_at":"2022-04-25T17:15:36.547Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2022-1441","https://security-tracker.debian.org/tracker/CVE-2022-1441"],"severity":{"label":"high","score":7.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2022-1441","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2022-1441"}],"summary":"MP4Box is a component of GPAC-2.0.0, which is a widely-used third-party package on RPM Fusion. When MP4Box tries to parse a MP4 file, it calls the function `diST_box_read()` to read from video. In thi"}