CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3974 – Axiomatic Bento4 mp4info Ap4StdCFileByteStream.cpp ReadPartial heap-based overflow
https://notcve.org/view.php?id=CVE-2022-3974
A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9987970/mp4info_overflow_ReadPartial341.zip https://github.com/axiomatic-systems/Bento4/issues/812 https://vuldb.com/?id.213553 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer CWE-787: Out-of-bounds Write •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 2CVE-2022-3809 – Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service
https://notcve.org/view.php?id=CVE-2022-3809
A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip https://github.com/axiomatic-systems/Bento4/issues/779 https://vuldb.com/?id.212666 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3812 – Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak
https://notcve.org/view.php?id=CVE-2022-3812
A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. • https://github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zip https://github.com/axiomatic-systems/Bento4/issues/792 https://vuldb.com/?id.212678 • CWE-401: Missing Release of Memory after Effective Lifetime CWE-404: Improper Resource Shutdown or Release •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 1CVE-2022-3817 – Axiomatic Bento4 mp4mux memory leak
https://notcve.org/view.php?id=CVE-2022-3817
A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. • https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zip https://github.com/axiomatic-systems/Bento4/issues/792 https://vuldb.com/?id.212683 • CWE-404: Improper Resource Shutdown or Release •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 2CVE-2022-3810 – Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service
https://notcve.org/view.php?id=CVE-2022-3810
A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. • https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip https://github.com/axiomatic-systems/Bento4/issues/779 https://vuldb.com/?id.212667 • CWE-404: Improper Resource Shutdown or Release •