CVE-2022-3814: Axiomatic Bento4 mp4decrypt memory leak
Published Nov 1, 2022
·Updated
A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680.
Affected Software
1 affected component
Axiosys Bento4=1.6.0-639
Event History
Nov 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2022-3814.
2
What component is affected by this vulnerability?
The component affected by this vulnerability is mp4decrypt.
3
What is the severity rating of this vulnerability?
The severity rating of this vulnerability is medium with a CVSS score of 6.5.
4
Is there a known exploit for this vulnerability?
Yes, an exploit for this vulnerability has been disclosed to the public.
5
How can I fix this vulnerability?
To fix this vulnerability, update Axiomatic Bento4 to a version that is not affected by the vulnerability.