CVE-2022-41847: Medium severity Axiosys Bento4 vulnerability

Published Sep 30, 2022

Updated

An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4StdcFileByteStream::Create(AP4FileByteStream, char const, AP4FileByteStream::Mode, AP4ByteStream&) in System/StdC/Ap4StdCFileByteStream.cpp.

Affected Software

1 affected component

Axiosys Bento4=1.6.0-639

Event History

Sep 30, 2022

CVE Published

via MITRE·04:41 AM

Data Sourced

via MITRE·04:41 AM

Description

Data Sourced

via NVD·05:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-41847?

The severity of CVE-2022-41847 is medium with a CVSS score of 5.5.

What is the affected software for CVE-2022-41847?

The affected software for CVE-2022-41847 is Axiosys Bento4 version 1.6.0-639.

Is there a memory leak in Bento4 1.6.0-639?

Yes, there is a memory leak in Bento4 1.6.0-639.

How can I fix the memory leak in Bento4 1.6.0-639?

To fix the memory leak in Bento4 1.6.0-639, you should update to a patched version when it becomes available.

Where can I find more information about CVE-2022-41847?

You can find more information about CVE-2022-41847 at the following references: [GitHub Issue #750](https://github.com/axiomatic-systems/Bento4/issues/750), [GitHub Issue #759](https://github.com/axiomatic-systems/Bento4/issues/759), and [GitHub Issue #775](https://github.com/axiomatic-systems/Bento4/issues/775).