CVE-2022-3974 A critical vulnerability was found in Axiomatic Bento4. The affected function is AP4_StdcFileByteStream::ReadPartial of the mp4info component.

VDB values indicate a risk level for each vulnerability. Critical VDB means a vulnerability is deemed to have a high risk. The system administrators are advised to patch the vulnerability to prevent any malicious activities. In addition, the system administrators are advised to monitor the traffic to detect any attempts to exploit the vulnerability.

Table of Contents

1. Introduction
1.1 What is a vulnerability?
2. VDB Values for CVE-2022-3974
2.1 Critical VDB value
3. Conclusion
4. References

VDB Entry for CVE-2022-3974

The vulnerability is in the application, which allows denial of service attacks. However, as it does not allow for remote code execution, it is classified as Low risk.

Vulnerability details

Name: CVE-2022-3974
CVE ID: 2022-3974
Published Date:
Description:
The vulnerability is caused due to improper access control. An attacker can exploit the vulnerability by manipulating the parameters of a web service. The system administrators are advised to patch the vulnerability to prevent any malicious activities.

Timeline

Published on: 11/13/2022 10:15:00 UTC
Last modified on: 11/17/2022 20:47:00 UTC

References

• https://github.com/axiomatic-systems/Bento4/files/9987970/mp4info_overflow_ReadPartial341.zip
• https://github.com/axiomatic-systems/Bento4/issues/812
• https://vuldb.com/?id.213553
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2022-3974