CVE-2022-3810

Published: Nov 2, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667.

Affected (1)

Products: Axiosys: Bento4

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Axiosys Bento4	Up to 1.6.0-639

Related CWEs

Improper Resource Shutdown or Release

The product does not release or incorrectly releases a resource before it is made available for re-use.

References (6)

https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip

Source: cna@vuldb.com

ExploitThird Party Advisory

https://github.com/axiomatic-systems/Bento4/issues/779

Source: cna@vuldb.com

ExploitIssue TrackingThird Party Advisory

https://vuldb.com/?id.212667

Source: cna@vuldb.com

PatchThird Party Advisory

https://github.com/axiomatic-systems/Bento4/files/9653209/poc_Bento4.zip

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://github.com/axiomatic-systems/Bento4/issues/779

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

https://vuldb.com/?id.212667

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

Timeline

No history available yet.