CVE-2022-3663 - Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference

Back Back to CVE browser

MEDIUM

Axiomatic Bento4 MP4fragment Ap4StsdAtom.cpp AP4_StsdAtom null pointer dereference

Published Oct 26, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.71%

Description

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. This issue affects the function AP4_StsdAtom of the file Ap4StsdAtom.cpp of the component MP4fragment. The manipulation leads to null pointer dereference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212003.

Affected products

Vendor Axiomatic Product Bento4 Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Axiomatic

Bento4

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-404

Improper Resource Shutdown or Release

CWE-476

NULL Pointer Dereference

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43022
Advisory
https://github.com/axiomatic-systems/Bento4/files/9817303/mp4fragment_npd_Ap4StsdAtom.cpp75.zip
ExploitThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/800
ExploitThird Party Advisory
https://vuldb.com/?id.212003
Permissions RequiredThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43022		Advisory
https://github.com/axiomatic-systems/Bento4/files/9817303/mp4fragment_npd_Ap4StsdAtom.cpp75.zip		ExploitThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/800		ExploitThird Party Advisory
https://vuldb.com/?id.212003		Permissions RequiredThird Party Advisory