Lucene search
HistorySep 14, 2022 - 9:15 p.m.
CVE-2022-40438
cve-2022-40438
buffer overflow
ap4_memorybytestream
writepartial
bento4
denial of service
nvd
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
30.4%
Buffer overflow vulnerability in function AP4_MemoryByteStream::WritePartial in mp42aac in Bento4 v1.6.0-639, allows attackers to cause a denial of service via a crafted file.
Affected configurations
Node
axiosysbento4Match1.6.0-639
| CPE | Name | Operator | Version |
|---|---|---|---|
| axiosys:bento4 | axiosys bento4 | eq | 1.6.0-639 |
Social References
More
Related
ubuntucve
ubuntucve
CVE-2022-40438
2022-09-14 00:00:00
prion
prion
Buffer overflow
2022-09-14 21:15:00
cvelist
cvelist
CVE-2022-40438
2022-09-14 20:06:38
osv
osv
CVE-2022-40438
2022-09-14 21:15:10
nvd
nvd
CVE-2022-40438
2022-09-14 21:15:10
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
30.4%
Related for CVE-2022-40438