Lucene search

VulDBCVELIST:CVE-2022-3812

HistoryNov 01, 2022 - 12:00 a.m.

CVE-2022-3812 Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak

2022-11-0100:00:00

CWE-404

VulDB

www.cve.org

axiomatic bento4

mp4encrypt

ap4_containeratom

memory leak

cve-2022-3812

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212678 is the identifier assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "Axiomatic",
    "product": "Bento4",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zip

github.com/axiomatic-systems/Bento4/issues/792

vuldb.com/?id.212678

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

AI Score

6.7

Confidence

High

EPSS

0.001

Percentile

50.0%

JSON

Related for CVELIST:CVE-2022-3812