CVE-2022-3668

MEDIUM

Axiosys Bento4 - Memory Leak

Title source: rule

Description

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212008.

References (3)

Scores

CVSS v3 5.3
EPSS 0.0021
EPSS Percentile 42.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Classification

CWE
CWE-401 CWE-404
Status published

Affected Products (1)

axiosys/bento4

Timeline

Published Oct 26, 2022
Tracked Since Feb 18, 2026