PT-2022-25499
CVE-2022-40737
·
تاريخ النشر
2022-09-15
·
تاريخ التحديث
2024-04-08
الوصف من
CVSS 3.1
6.5
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions
Bento4 versions 1.6.0-639 and earlier
Description
A buffer over-read issue exists in the function
AP4 StdcFileByteStream::WritePartial located in System/StdC/Ap4StdCFileByteStream.cpp, which is called from AP4 ByteStream::Write and AP4 HdlrAtom::WriteFields.Recommendations
For Bento4 versions 1.6.0-639 and earlier, as a temporary workaround, consider restricting the use of the
AP4 StdcFileByteStream::WritePartial function until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾