{"id":"CVE-2022-38216","details":"An integer overflow exists in Mapbox's closed source gl-native library prior to version 10.6.1, which is bundled with multiple Mapbox products including open source libraries. The overflow is caused by large image height and width values when creating a new Image and allows for out of bounds writes, potentially crashing the Mapbox process.","aliases":["GHSA-4696-g7jj-xg2h"],"modified":"2026-08-12T03:51:24.367023853Z","published":"2022-08-16T00:34:54Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38216.json","cna_assigner":"facebook","cwe_ids":["CWE-190"]},"references":[{"type":"WEB","url":"https://github.com/mapbox/mapbox-maps-android/releases/tag/android-v10.6.1"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/38xxx/CVE-2022-38216.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38216"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/mapbox/mapbox-maps-android","events":[{"introduced":"0"},{"fixed":"c8015c669cc6b874a1a18177a9095527cc819bc2"}],"database_specific":{"source":["AFFECTED_FIELD","CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:mapbox:maps_software_development_kit:*:*:*:*:*:android:*:*","extracted_events":[{"introduced":"0"},{"fixed":"10.6.1"}]}}],"versions":["android-v10.6.0-rc.1","android-v10.6.0-beta.2","android-v10.6.0-beta.1","extension-androidauto-v0.1.0","android-v10.5.0-beta.1","android-v10.4.0-beta.1","android-v10.0.0","android-v10.1.0","android-v10.2.0-beta.1","android-v10.1.0-rc.1","android-v10.1.0-beta.1","android-v10.0.0-rc.9","android-v10.0.0-rc.8","android-v10.0.0-beta.19","android-v10.0.0-rc.7","android-v10.0.0-rc.6","android-v10.0.0-rc.5","android-v10.0.0-rc.4","android-v10.0.0-rc.3","android-v10.0.0-rc.2","android-v10.0.0-rc.1","android-v10.0.0-beta.21","android-v10.0.0-beta.20","android-v10.0.0-beta.18","android-v10.0.0-beta.17","android-v10.0.0-beta.16","android-v10.0.0-beta.15","android-v10.0.0-beta.14","android-v10.0.0-beta.13","android-v10.0.0-beta.12"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-38216.json"}}],"schema_version":"1.9.0"}