Vulnerability · Published Nov 1, 2022 · Assigned by VulDB
CVE-2022-3809Axiomatic Bento4 mp4tag Mp4Tag.cpp ParseCommandLine denial of service
Medium 4.3
In plain English
A medium-severity security flaw in Bento4 from Axiomatic. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Official description
A vulnerability was found in Axiomatic Bento4 and classified as problematic. Affected by this issue is the function ParseCommandLine of the file Mp4Tag/Mp4Tag.cpp of the component mp4tag. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212666 is the identifier assigned to this vulnerability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3809 |
| Ubuntu:24.04:LTS | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3809 |
| Ubuntu:25.10 | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3809 |
| Ubuntu:26.04:LTS | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3809 |
| Ubuntu:26.10 | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3809 |
Affected products (as reported)
Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L