Lucene search

VulDBCVELIST:CVE-2022-3662

HistoryOct 26, 2022 - 12:00 a.m.

CVE-2022-3662 Axiomatic Bento4 mp42hls Ap4Sample.h GetOffset use after free

2022-10-2600:00:00

CWE-119

VulDB

www.cve.org

axiomatic bento4

mp42hls

ap4sample.h

getoffset

use after free

remote attack

vdb-212002

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

39.6%

JSON

A vulnerability was found in Axiomatic Bento4. It has been declared as critical. This vulnerability affects the function GetOffset of the file Ap4Sample.h of the component mp42hls. The manipulation leads to use after free. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-212002 is the identifier assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "Axiomatic",
    "product": "Bento4",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/axiomatic-systems/Bento4/files/9817606/mp42hls_cuaf_Ap4Sample99.zip

github.com/axiomatic-systems/Bento4/issues/802

vuldb.com/?id.212002

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS

0.001

Percentile

39.6%

JSON

Related for CVELIST:CVE-2022-3662