Lucene search

MitreCVE-2023-29574

HistoryApr 12, 2023 - 1:15 p.m.

CVE-2023-29574

2023-04-1213:15:07

mitre

web.nvd.nist.gov

cve-2023-29574

bento4

out-of-memory bug

mp42avc component

nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

23.7%

JSON

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.

Affected configurations

Nvd

Node

axiosysbento4Match1.6.0-639

VendorProductVersionCPE
axiosysbento41.6.0-639cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
axiosys	bento4	1.6.0-639	cpe:2.3:a:axiosys:bento4:1.6.0-639:::::::*

References

github.com/axiomatic-systems/Bento4/issues/841

github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42avc/readme.md

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

23.7%

JSON

Related for CVE-2023-29574