Vulnerability · Published Apr 12, 2023 · Assigned by mitre

CVE-2023-29574

Medium 5.5

In plain English

A medium-severity memory corruption in the affected software. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS 3.1)5.5Medium

Exploit odds (30 days)0.3%top 78.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

Bento4 v1.6.0-639 was discovered to contain an out-of-memory bug in the mp42avc component.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

Weakness: CWE-119 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

References

https://github.com/axiomatic-systems/Bento4/issues/841
https://github.com/z1r00/fuzz_vuln/blob/main/Bento4/mp42avc/readme.md