CVE-2022-3813

Axiomatic Bento4 mp4edit memory leak

Medium4.3EPSS 0.98%

Published: 1 Nov 2022
Updated: 15 Apr 2025
Reserved: 1 Nov 2022
Assigned by: VulDB

Description

A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.

Scores

CVSS scores of CVE-2022-3813, by who scored it
Scored by	CVSS	Score	Vector
VulDBCNA (assigner)	3.1	Medium4.3	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
NVDNVD · Modified	3.1	Medium6.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

EPSS (exploitation in 30 days): 0.98% · top 38% of all CVEs (7 Nov 2026)
CISA SSVC: Exploitation: none · Automatable: no · Technical impact: partial

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 4.3.

Weakness

CWE-404 Denial of Service -> CWE-401 Memory Leak (opens in a new tab)All about CWE-404 and its CVEs

Affected products

Axiomatic · Bento4
- affected n/a

References (3)

https://github.com/axiomatic-systems/Bento4/issues/792 (opens in a new tab)x_transferred
https://github.com/axiomatic-systems/Bento4/files/9726974/POC_mp4edit_728838793.zip (opens in a new tab)x_transferred
https://vuldb.com/?id.212679 (opens in a new tab)x_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2022-3813](https://trackcve.app/badge/CVE-2022-3813.svg)](https://trackcve.app/cve/CVE-2022-3813)

Record last updated 15 Apr 2025, 13:18 UTC.