CVE-2022-3664: Axiomatic Bento4 avcinfo Ap4BitStream.cpp WriteBytes heap-based overflow

Published Oct 26, 2022

Updated

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212004.

Affected Software

1 affected component

Axiosys Bento4=1.6.0-639

Event History

Oct 26, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-3664?

CVE-2022-3664 is a critical vulnerability found in Axiomatic Bento4 that allows for a remote heap-based buffer overflow.

How severe is CVE-2022-3664?

CVE-2022-3664 is classified as a high severity vulnerability with a severity value of 7.8.

Which component of Axiomatic Bento4 is affected by CVE-2022-3664?

The function AP4_BitStream::WriteBytes of the file Ap4BitStream.cpp in the avcinfo component is affected by CVE-2022-3664.

How can the CVE-2022-3664 vulnerability be exploited?

The CVE-2022-3664 vulnerability can be exploited remotely.

What is the recommended fix for CVE-2022-3664?

Currently, there is no fix available for CVE-2022-3664. It is advised to follow the provided references for any updates or patches.