CVE-2022-24902

LOW

tkvideoplayer < 2.0.0 - Uncontrolled Resource Consumption

Title source: llm

Description

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.

References (2)

Core 2

Core References

Third Party Advisory x_refsource_confirm

https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-hhmq

Issue Tracking, Third Party Advisory x_refsource_misc

https://github.com/PaulleDemon/tkVideoPlayer/issues/3

Scores

CVSS v3 2.9

EPSS 0.0015

EPSS Percentile 35.0%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-400

Status published

Products (2)

pypi/tkvideoplayer 0 - 2.0.0PyPI

python/tkvideoplayer < 2.0.0

Published May 06, 2022

Tracked Since Feb 18, 2026