PT-2022-25385

CVE-2022-40439

Published

2022-09-14

Updated

2024-04-08

Description by

CVSS 3.1

6.5

Medium

MetricsAV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Bento4 version 1.6.0-639

Description A memory leak issue was found in the AP4 StdcFileByteStream::Create function in mp42ts, which can be exploited by attackers to cause a denial of service using a crafted file.

Recommendations For Bento4 version 1.6.0-639, consider updating to a newer version that addresses this issue, as no specific fix is provided for this version.

Exploitability

Exploit

Fix

Impacts

Researchers

17Ssdp

Vendors

Affected products

Weakness enumeration

CWE-401: Missing Release of Memory after Effective Lifetime

Related identifiers

CVE-2022-40439