CVE-2022-3812
Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak
MEDIUM 6.5EPSS 0.8%
A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212678 is the identifier assigned to this vulnerability.
- Affected
- Axiomatic · Bento4
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H - CVSS v3.1 VULDB
- 4.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L - EPSS
- 0.85% chance of exploitation in the next 30 days, 57th percentile
- Published
- 2022-11-01
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zip2510★ · 2026-06-27