CVE-2022-1441

CVE-2022-1441 is a high-severity buffer overflow vulnerability (CVSS 7.8) affecting MP4Box, a component of GPAC-2.0.0, including its Debian packages. The flaw occurs when parsing MP4 files, where the `diST_box_read()` function attempts to write user-controlled content into a fixed-length buffer, leading to potential arbitrary code execution, data compromise, and denial of service. Exploitation requires user interaction, typically by opening a malicious MP4 file. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this vulnerability.