Skip to content
OpenAdvisories
Medium · 4.3 CVE-2022-3812 EUVD-2022-43153GHSA-6c7q-3hq7-hf68

Axiomatic Bento4 mp4encrypt AP4_ContainerAtom memory leak

Published Nov 1, 2022 · Updated Aug 3, 2024 · Assigned by VulDB

Description

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212678 is the identifier assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
Axiomatic Bento4 — —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 26.10 kodi-inputstream-adaptive No fix yet —
Ubuntu 26.04 LTS kodi-inputstream-adaptive No fix yet —
Ubuntu 25.10 kodi-inputstream-adaptive No fix yet —
Ubuntu 24.04 LTS kodi-inputstream-adaptive No fix yet —
Ubuntu 22.04 LTS kodi-inputstream-adaptive No fix yet —

References