Lucene search

PRIOn knowledge basePRION:CVE-2022-3664

HistoryOct 26, 2022 - 7:15 p.m.

Heap overflow

2022-10-2619:15:00

PRIOn knowledge base

www.prio-n.com

axiomatic bento4

buffer overflow

critical vulnerability

heap-based

remote attack

vdb-212004

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212004.

CPENameOperatorVersion
bento4eq1.6.0-639

CPE	Name	Operator	Version
	bento4	eq	1.6.0-639

References

github.com/axiomatic-systems/Bento4/files/9746288/avcinfo_poc1.zip

github.com/axiomatic-systems/Bento4/issues/794

vuldb.com/?id.212004