CVE-2022-27146: 
NixOS vulnerability analysis and mitigation

GPAC mp4box version 1.1.0-DEV-rev1759-geb2d1e6dd contains a heap-buffer-overflow vulnerability in the function gf_isom_apple_enum_tag. This vulnerability was discovered in February 2022 and affects the MP4Box component of GPAC (NVD, MITRE).

The vulnerability exists in the gf_isom_apple_enum_tag function located in src/isomedia/isom_read.c. When processing certain MP4 files, the function performs a read operation that exceeds the allocated buffer size, specifically reading 1 byte beyond a 5-byte allocated region at address 0x6020000014f5. This heap-buffer-overflow was detected by AddressSanitizer during testing (GitHub Issue).

A successful exploitation of this vulnerability could lead to memory corruption, potentially resulting in program crashes or arbitrary code execution. The vulnerability affects the MP4Box component, which is a key tool in GPAC for manipulating MP4 files.

The vulnerability can be triggered by processing specially crafted MP4 files. A proof-of-concept file has been documented that demonstrates the buffer overflow when using the command 'MP4Box -frag 1 -out /dev/null poc_file' (GitHub Issue).

Users should upgrade to a version of GPAC that contains the fix for this vulnerability. If upgrading is not immediately possible, users should exercise caution when processing untrusted MP4 files with the MP4Box tool.