CVE-2022-36186

What it actually does

Null pointer dereference in gf_filter_pid_set_property_full triggers an unhandled crash, resulting in denial of service.

Why it matters to the business

Applications that rely on GPAC for media processing can be forced offline by remote attackers, causing service outages and operational disruption; the issue has been public for over four years with publicly available exploit code.

How an attack unfolds

An attacker crafts network input that reaches gf_filter_pid_set_property_full with a null pointer; the dereference immediately terminates the process. No authentication or user interaction is required.

How to fix it

Upgrade to a build that includes commit b43f9d1 or later; rebuild all dependent packages and restart affected services.

How to confirm the fix worked

Confirm the running binary or library was built after commit b43f9d1; attempt to reproduce the original crash with known triggering input and verify the process no longer terminates.

Typical attack path

1. Attacker identifies a reachable GPAC instance accepting untrusted media or filter input
2. Sends specially formatted data that exercises the vulnerable code path
3. Process crashes due to null dereference, denying service to legitimate users

How to detect it

Monitor process crash logs and core dumps for references to filter_pid.c or gf_filter_pid_set_property_full; correlate with inbound connections that precede sudden terminations.

What your security team should do

• Prioritize upgrade of all GPAC installations to a post-b43f9d1 build within the next maintenance window
• Add GPAC crash signatures to monitoring to detect attempted exploitation
• Review network exposure of any GPAC-based media pipelines and apply least-privilege filtering where possible