CVE-2022-3669 - Axiomatic Bento4 mp4edit Create memory leak

Back Back to CVE browser

MEDIUM

Axiomatic Bento4 mp4edit Create memory leak

Published Oct 26, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.72%

Description

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212009 was assigned to this vulnerability.

Affected products

Vendor Axiomatic Product Bento4 Default
n/a

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Axiomatic

Bento4

n/a

Version	Status	Constraints

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-401

CWE-404

Improper Resource Shutdown or Release

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43028
Advisory
https://github.com/axiomatic-systems/Bento4/files/9675042/Bug_2_POC.zip
ExploitThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/776
ExploitThird Party Advisory
https://vuldb.com/?id.212009
Vendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-43028		Advisory
https://github.com/axiomatic-systems/Bento4/files/9675042/Bug_2_POC.zip		ExploitThird Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/776		ExploitThird Party Advisory
https://vuldb.com/?id.212009		Vendor Advisory