CVE-2022-3665 - Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow

Back Back to CVE browser

HIGH

Axiomatic Bento4 avcinfo AvcInfo.cpp heap-based overflow

Published Oct 26, 2022

7.8

HIGH

CVSS 3.1

EPSS 0.74%

Description

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is an unknown functionality of the file AvcInfo.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212005 was assigned to this vulnerability.

Affected products

Vendor Axiomatic Product Bento4 Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Axiomatic

Bento4

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-787

Out-of-bounds Write

References (3)

https://github.com/axiomatic-systems/Bento4/files/9746311/avcinfo_poc2.zip
ExploitThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/794
ExploitThird Party Advisory
https://vuldb.com/?id.212005
Permissions RequiredThird Party Advisory

Link	Providers	Tags
https://github.com/axiomatic-systems/Bento4/files/9746311/avcinfo_poc2.zip		ExploitThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/794		ExploitThird Party Advisory
https://vuldb.com/?id.212005		Permissions RequiredThird Party Advisory