Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2022-3814

Date: November 1, 2022

A vulnerability classified as problematic was found in Axiomatic Bento4. This vulnerability affects unknown code of the component mp4decrypt. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212680.

Language: C++

Severity Score

Related Resources (5)

https://vuldb.com/?id.212680
https://github.com/axiomatic-systems/Bento4/issues/792
https://github.com/axiomatic-systems/Bento4/files/9727002/POC_mp4decrypt_477546304.zip
https://nvd.nist.gov/vuln/detail/CVE-2022-3814
https://www.mend.io/vulnerability-database/CVE-2022-3814

Severity Score

Weakness Type (CWE)

Improper Resource Shutdown or Release

CWE-404

Missing Release of Memory after Effective Lifetime

CWE-401

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): REQUIRED
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us