PT-2022-24214

CVE-2022-3812

Published

2022-11-01

Updated

2024-04-08

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 (affected versions not specified)

Description A memory leak issue was found in Axiomatic Bento4, specifically affecting the AP4 ContainerAtom::AP4 ContainerAtom function of the mp4encrypt component. This issue can be exploited remotely, leading to a memory leak. The exploit has been disclosed to the public.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploitability

Exploit

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

CWE-404: Improper Resource Shutdown or Release

CWE-401: Missing Release of Memory after Effective Lifetime

Related identifiers

CVE-2022-3812