← Database

CVE-2022-3664

HIGH CVSS: 7.3 Published: 2022-10-26 Modified: 2026-06-17

Description

A vulnerability classified as critical has been found in Axiomatic Bento4. Affected is the function AP4_BitStream::WriteBytes of the file Ap4BitStream.cpp of the component avcinfo. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212004.

Affected Platforms

Axiosys Bento4

Weakness Type

CWE-119, CWE-787

References