CVE-2022-3669

Axiomatic Bento4 mp4edit Create memory leak

State
Published
Severity
5.3 Medium
Published
Oct 26, 2022
Updated
Apr 14, 2025
Reserved
Oct 22, 2022

Read the record on cve.org

Description

A vulnerability was found in Axiomatic Bento4 and classified as problematic. This issue affects the function AP4_AvccAtom::Create of the component mp4edit. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-212009 was assigned to this vulnerability.

Scores

CVSSScoreVectorSource
3.15.3 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LVulDB

Weaknesses

  • CWE-404 Denial of Service -> CWE-401 Memory Leak

Affected Products

ProductVersions
Bento4Axiomatic
  • n/aAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.