← volver
CVE-2022-3670

Axiomatic Bento4 mp42hevc WriteSample heap-based overflow

CVSS 7.3 HIGHEPSS 0.7%CWE-119
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 7.3EPSS 0.7%KEV nãoPoC Nuclei Metasploit Patch
Ciclo de vida
26 oct 2022Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability was found in Axiomatic Bento4. It has been classified as critical. Affected is the function WriteSample of the component mp42hevc. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-212010 is the identifier assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Productos afectados
Axiomatic · Bento4

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →