{"metadata": {"vulnerability": "cve-2022-2566", "count": 31, "kinds": {"milestone": 5, "sighting": 4, "kev": 0, "other": 22}}, "data": [{"timestamp": "2022-07-28T00:00:00Z", "date_only": false, "value": "2022-07-28T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2022-2566", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-08-27T00:00:00Z", "date_only": false, "value": "2022-08-27T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / Google", "record": "cve-2022-2566", "field": "containers.cna.datePublic"}, {"timestamp": "2022-08-27T22:00:00Z", "date_only": false, "value": "2022-08-27T22:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "cvelistv5 / Google", "record": "cve-2022-2566", "field": "containers.cna.x_legacyV4Record.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-08-27T22:00:00Z", "date_only": false, "value": "2022-08-27T22:00:00.000Z", "kind": "other", "label": "DATE PUBLIC", "source": "gsd \u00b7 GSD-2022-2566", "record": "GSD-2022-2566", "field": "namespaces.cve.org.CVE_data_meta.DATE_PUBLIC"}, {"timestamp": "2022-09-23T11:10:14.367Z", "date_only": false, "value": "2022-09-23T11:10:14.367Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2022-2566", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-09-23T12:15:00Z", "date_only": false, "value": "2022-09-23T12:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-M864-5788-G574", "record": "GHSA-M864-5788-G574", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-09-23T12:15:00Z", "date_only": false, "value": "2022-09-23T12:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-2566", "record": "GSD-2022-2566", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-09-23T12:15:10.103Z", "date_only": false, "value": "2022-09-23T12:15:10.103", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2566", "record": "FKIE_CVE-2022-2566", "field": "published"}, {"timestamp": "2022-09-23T16:13:23Z", "date_only": false, "value": "2022-09-23T16:13:23.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/50313", "record": "CVE-2022-2566", "field": "creation_timestamp", "uuid": "a1b093cd-d35b-4c70-87fa-a5d7a7a9c6e1", "content": "\u203c CVE-2022-2566 \u203c\n\nA heap out-of-bounds memory write exists in FFMPEG since version 5.1. The size calculation in `build_open_gop_key_points()` goes through all entries in the loop and adds `sc->ctts_data[i].count` to `sc->sample_offsets_count`. This can lead to an integer overflow resulting in a small allocation with `av_calloc(). An attacker can cause remote code execution via a malicious mp4 file. We recommend upgrading past commit c953baa084607dd1d84c3bfcce3cf6a87c3e6e05\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/50313"}, {"timestamp": "2022-09-25T00:00:26Z", "date_only": false, "value": "2022-09-25T00:00:26Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-M864-5788-G574", "record": "GHSA-M864-5788-G574", "field": "published"}, {"timestamp": "2022-09-27T00:00:17Z", "date_only": false, "value": "2022-09-27T00:00:17Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-M864-5788-G574", "record": "GHSA-M864-5788-G574", "field": "modified"}, {"timestamp": "2022-09-27T15:30:12Z", "date_only": false, "value": "2022-09-27T15:30:12.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / Google", "record": "cve-2022-2566", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-09-28T00:00:00Z", "date_only": true, "value": "2022-09-28", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-70582", "record": "CNVD-2022-70582", "field": "submitTime"}, {"timestamp": "2022-09-30T11:00:26Z", "date_only": false, "value": "2022-09-30T11:00:26.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/6887", "record": "CVE-2022-2566", "field": "creation_timestamp", "uuid": "43867a58-3f35-413d-add2-942eb28238d1", "content": "#exploit\n1. 0-Day RCE on Microsoft Exchange Server\nhttps://gteltsc.vn/blog/warning-new-attack-campaign-utilized-a-new-0day-rce-vulnerability-on-microsoft-exchange-server-12715.html\n\n2. CVE-2022-36934:\nInteger overflow in WhatsApp leading to RCE in an established\nhttps://infosecwriteups.com/cve-2022-36934-an-integer-overflow-in-whatsapp-leading-to-remote-code-execution-in-an-established-e0fc4e2cd900\n\n3. CVE-2022-2566:\nFFmpeg - Heap Out-Of-Bounds Write in build_open_gop_key_points\nhttps://github.com/google/security-research/security/advisories/GHSA-vhxg-9wfx-7fcj", "url": "https://t.me/CyberSecurityTechnologies/6887"}, {"timestamp": "2022-10-07T10:30:05Z", "date_only": false, "value": "2022-10-07T10:30:05.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/MrVGunz/540", "record": "CVE-2022-2566", "field": "creation_timestamp", "uuid": "798e79da-0fb3-48f1-9e23-8c35d43b4ed1", "content": "CVE-2022-2566 : FFmpeg < 5.1 - Heap Out-Of-Bounds Write in build_open_gop_key_points -> Rce\nPOC : https://github.com/google/security-research/security/advisories/GHSA-vhxg-9wfx-7fcj", "url": "https://t.me/MrVGunz/540"}, {"timestamp": "2022-10-13T00:00:00Z", "date_only": true, "value": "2022-10-13", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-70582", "record": "CNVD-2022-70582", "field": "openTime"}, {"timestamp": "2022-10-13T10:23:04Z", "date_only": false, "value": "2022-10-13T10:23:04.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "Telegram/FS_aGd7NPqhAUoD6QQ6poWCZk70gALF5OHUbODb75o1lvL0", "record": "CVE-2022-2566", "field": "creation_timestamp", "uuid": "1a917858-c31f-4bb2-9fd5-027161285abb"}, {"timestamp": "2023-06-27T20:44:00Z", "date_only": false, "value": "2023-06-27T20:44Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-2566", "record": "GSD-2022-2566", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:19:20.012Z", "date_only": false, "value": "2023-12-13T01:19:20.012281Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-2566", "record": "GSD-2022-2566", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12332-1", "record": "OPENSUSE-SU-2024:12332-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12332-1", "record": "OPENSUSE-SU-2024:12332-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12332-1", "record": "OPENSUSE-SU-2024:12332-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12332-1", "record": "OPENSUSE-SU-2024:12332-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2024-08-03T00:39:07.996Z", "date_only": false, "value": "2024-08-03T00:39:07.996Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2022-2566", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-04-21T13:36:59.031Z", "date_only": false, "value": "2025-04-21T13:36:59.031026Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-2566", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-04-21T13:36:59.031Z", "date_only": false, "value": "2025-04-21T13:36:59.031026Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2566", "record": "FKIE_CVE-2022-2566", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-04-21T13:49:02.102Z", "date_only": false, "value": "2025-04-21T13:49:02.102Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2022-2566", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-04-21T13:49:02.102Z", "date_only": false, "value": "2025-04-21T13:49:02.102Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2022-2566", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:42:07.790Z", "date_only": false, "value": "2026-06-17T04:42:07.790", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-2566", "record": "FKIE_CVE-2022-2566", "field": "lastModified"}, {"timestamp": "2026-09-20T20:36:24Z", "date_only": false, "value": "2026-09-20T20:36:24Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12332-1", "record": "OPENSUSE-SU-2024:12332-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:36:24Z", "date_only": false, "value": "2026-09-20T20:36:24Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:12332-1", "record": "OPENSUSE-SU-2024:12332-1", "field": "document.tracking.current_release_date"}]}