Vulnerability · Published Nov 1, 2022 · Assigned by VulDB
CVE-2022-3810Axiomatic Bento4 mp42hevc Mp42Hevc.cpp AP4_File denial of service
Medium 4.3
In plain English
A medium-severity security flaw in Bento4 from Axiomatic. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 64% of all known vulnerabilities).
Official description
A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4_File::AP4_File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212667.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3810 |
| Ubuntu:24.04:LTS | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3810 |
| Ubuntu:25.10 | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3810 |
| Ubuntu:26.04:LTS | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3810 |
| Ubuntu:26.10 | kodi-inputstream-adaptive | no fix listed | UBUNTU-CVE-2022-3810 |
Affected products (as reported)
Weakness: CWE-404 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L