CVE-2023-38666

EPSS 0.3%CWE-125

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

22 Aug 2023Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4encrypt.

Affected products

References