PT-2022-23531 · Axiomatic+1 · Axiomatic Bento4+1

Burymyname · Published 2022-10-26 · Updated 2024-04-08 · CVE-2022-3666

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Axiomatic Bento4 (affected versions not specified)

Description A critical issue has been found in Axiomatic Bento4, affecting the AP4 LinearReader::Advance function of the Ap4LinearReader.cpp file in the mp42ts component. This issue leads to use after free and can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

ALT-PU-2024-6114

CVE-2022-3666

Affected Products

Alt Linux

Axiomatic Bento4

References · 8

• 🔥 https://github.com/axiomatic-systems/Bento4/files/9744391/mp42ts_poc.zip · Exploit
• 🔥 https://github.com/axiomatic-systems/Bento4/issues/793 · Exploit
• https://ubuntu.com/security/CVE-2022-3666 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2022-3666 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3666 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-3666 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3666 · Security Note
• https://vuldb.com/?id.212006 · Note