CVE-2022-3816

2022-11-0122:15:12

CWE-404

[email protected]

web.nvd.nist.gov

cve

vulnerability

axiomatic bento4

mp4decrypt

memory leak

remote attack

exploit

vdb-212682

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

50.1%

JSON

A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212682 is the identifier assigned to this vulnerability.

Affected configurations

NVD

Node

axiosysbento4Match1.6.0-639

CPENameOperatorVersion
axiosys:bento4axiosys bento4eq1.6.0-639

CPE	Name	Operator	Version
axiosys:bento4	axiosys bento4	eq	1.6.0-639

CNA Affected

[
  {
    "vendor": "Axiomatic",
    "product": "Bento4",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]