CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 2CVE-2022-4584 – Axiomatic Bento4 mp42aac heap-based overflow
https://notcve.org/view.php?id=CVE-2022-4584
17 Dec 2022 — A vulnerability was found in Axiomatic Bento4 up to 1.6.0-639. It has been rated as critical. Affected by this issue is some unknown functionality of the component mp42aac. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. • https://github.com/axiomatic-systems/Bento4/files/10095915/POC2.tar.gz • CWE-122: Heap-based Buffer Overflow •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3974 – Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow
https://notcve.org/view.php?id=CVE-2022-3974
13 Nov 2022 — A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9987970/mp4info_overflow_ReadPartial341.zip • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2022-3810 – Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service
https://notcve.org/view.php?id=CVE-2022-3810
01 Nov 2022 — A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. • https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip • CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3817 – Axiomatic Bento4 mp4mux memory leak
https://notcve.org/view.php?id=CVE-2022-3817
01 Nov 2022 — A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zip • CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3815 – Axiomatic Bento4 mp4decrypt memory leak
https://notcve.org/view.php?id=CVE-2022-3815
01 Nov 2022 — A vulnerability, which was classified as problematic, has been found in Axiomatic Bento4. This issue affects some unknown processing of the component mp4decrypt. The manipulation leads to memory leak. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9727048/POC_mp4decrypt_34393864.zip • CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 2CVE-2022-3809 – Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service
https://notcve.org/view.php?id=CVE-2022-3809
01 Nov 2022 — A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip • CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3816 – Axiomatic Bento4 mp4decrypt memory leak
https://notcve.org/view.php?id=CVE-2022-3816
01 Nov 2022 — A vulnerability, which was classified as problematic, was found in Axiomatic Bento4. Affected is an unknown function of the component mp4decrypt. The manipulation leads to memory leak. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9727059/POC_mp4decrypt_654515280.zip • CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3812 – Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak
https://notcve.org/view.php?id=CVE-2022-3812
01 Nov 2022 — A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. • https://github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zip • CWE-401: Missing Release of Memory after Effective Lifetime CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3807 – Axiomatic Bento4 Incomplete Fix CVE-2019-13238 resource consumption
https://notcve.org/view.php?id=CVE-2022-3807
01 Nov 2022 — A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Incomplete Fix CVE-2019-13238. The manipulation leads to resource consumption. The attack may be launched remotely. • https://github.com/axiomatic-systems/Bento4/files/9820612/mp42aac_exhaustive_AP4_RtpAtom50.zip • CWE-252: Unchecked Return Value CWE-404: Improper Resource Shutdown or Release •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-3813 – Axiomatic Bento4 mp4edit memory leak
https://notcve.org/view.php?id=CVE-2022-3813
01 Nov 2022 — A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9726974/POC_mp4edit_728838793.zip • CWE-404: Improper Resource Shutdown or Release •