CVE-2022-41847

An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStream::Mode, AP4_ByteStream*&) in System/StdC/Ap4StdCFileByteStream.cpp.
References
Link Resource
https://github.com/axiomatic-systems/Bento4/issues/750 Exploit Issue Tracking Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/759 Exploit Issue Tracking Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/775 Exploit Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*

History

28 Oct 2022, 22:51

Type Values Removed Values Added
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/750 - Exploit, Third Party Advisory (MISC) https://github.com/axiomatic-systems/Bento4/issues/750 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/775 - Exploit, Third Party Advisory (MISC) https://github.com/axiomatic-systems/Bento4/issues/775 - Exploit, Issue Tracking, Third Party Advisory
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/759 - Exploit, Third Party Advisory (MISC) https://github.com/axiomatic-systems/Bento4/issues/759 - Exploit, Issue Tracking, Third Party Advisory

03 Oct 2022, 20:37

Type Values Removed Values Added
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/750 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/750 - Exploit, Third Party Advisory
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/775 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/775 - Exploit, Third Party Advisory
References (MISC) https://github.com/axiomatic-systems/Bento4/issues/759 - (MISC) https://github.com/axiomatic-systems/Bento4/issues/759 - Exploit, Third Party Advisory
CWE CWE-401
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 5.5
First Time Axiosys bento4
Axiosys
CPE cpe:2.3:a:axiosys:bento4:1.6.0-639:*:*:*:*:*:*:*

30 Sep 2022, 05:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-30 05:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-41847

Mitre link : CVE-2022-41847

CVE.ORG link : CVE-2022-41847


JSON object : View

Products Affected

axiosys

  • bento4
CWE
CWE-401

Missing Release of Memory after Effective Lifetime