CVE-2022-41845

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_Array<AP4_ElstEntry>::EnsureCapacity in Core/Ap4Array.h.
References
Link Resource
https://github.com/axiomatic-systems/Bento4/issues/747 Exploit Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/770 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*

History

03 Oct 2022, 20:47

Type Values Removed Values Added
CWE CWE-770
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Axiosys bento4
Axiosys
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/770 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/770 - Exploit, Third Party Advisory
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/747 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/747 - Exploit, Third Party Advisory
CPE cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*

30 Sep 2022, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-30 05:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-41845

Mitre link : CVE-2022-41845

CVE.ORG link : CVE-2022-41845


JSON object : View

Products Affected

axiosys

  • bento4
CWE
CWE-770

Allocation of Resources Without Limits or Throttling