CVE-2022-41846

An issue was discovered in Bento4 1.6.0-639. There ie excessive memory consumption in the function AP4_DataBuffer::ReallocateBuffer in Core/Ap4DataBuffer.cpp.
References
Link Resource
https://github.com/axiomatic-systems/Bento4/issues/342 Exploit Issue Tracking Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/770 Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*

History

28 Oct 2022, 22:52

Type Values Removed Values Added
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/342 - Third Party Advisory (MISC) https://github.com/axiomatic-systems/Bento4/issues/342 - Exploit, Issue Tracking, Third Party Advisory

03 Oct 2022, 20:34

Type Values Removed Values Added
First Time Axiosys bento4
Axiosys
CWE CWE-770
CPE cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/770 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/770 - Exploit, Third Party Advisory
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/342 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/342 - Third Party Advisory

30 Sep 2022, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-30 05:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-41846

Mitre link : CVE-2022-41846

CVE.ORG link : CVE-2022-41846


JSON object : View

Products Affected

axiosys

  • bento4
CWE
CWE-770

Allocation of Resources Without Limits or Throttling