CVE-2022-3668 MEDIUM

CVE-2022-3668: Axiomatic Bento4 mp4edit CreateAtomFromStream memory leak

Vendor Axiomatic

Product Bento4

Weakness CWE-404

Published October 26, 2022

Last update April 14, 2025

View on NVD All CVEs

CVSS base score

5.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

What the vulnerability does

01Description

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212008.

Key dates

02Disclosure timeline

October 26, 2022 CVE published

April 14, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-3668 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/404.html

Related vulnerabilities

04Related CVE

CVE-2026-1586 Open5GS SGWC s11-handler.c ogs_gtp2_f_teid_to_ip denial of service CVE-2019-0044 Junos OS: SRX5000 series: Kernel crash (vmcore) upon receipt of a specific packet on fxp0 interface CVE-2015-10025 luelista miniConf URL Scanning MessageView.cs denial of service CVE-2026-7779 Open5GS authentication-subscription Endpoint nudr-handler.c udm_nudr_dr_handle_subscription_authentication denial of service CVE-2025-3730 PyTorch LossCTC.cpp torch.nn.functional.ctc_loss denial of service