CVE-2022-37416

libmpeg2: memcpy-param-overlap in function impeg2_mc_fullx_fully_8x8

Loading…

Severity

Moderate

Red Hat Product Security

6.5

CVSS 3.1

Review impact separately from score.

Published · August 5, 2022

Updated · November 22, 2025

Description

Ittiam libmpeg2 before 2022-07-27 uses memcpy with overlapping memory blocks in impeg2_mc_fullx_fully_8x8.

Statement

This CVE is for Android's libmpeg2, which is a completely different code base than the old standalone library by the same name. Hence, libmpeg2 shipped in Red Hat offerings is not affected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CWE not specified