CVE-2022-3812

A vulnerability was found in Axiomatic Bento4. It has been rated as problematic. Affected by this issue is the function AP4_ContainerAtom::AP4_ContainerAtom of the component mp4encrypt. The manipulation leads to memory leak. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-212678 is the identifier assigned to this vulnerability.

• CWE-404
• CWE-401

• https://github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zipExploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/792Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.212678Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/files/9726934/POC_mp4encrypt_631000973.zipExploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/792Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.212678Third Party Advisory

Published

Nov 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38114This vulnerability occurs when a web server fails to correct…6.1
• CVE-2022-38115Insecure method vulnerability in which allowed HTTP methods …5.3
• CVE-2022-38116Le-yan Personnel and Salary Management System has hard-coded…9.8
• CVE-2022-38117Juiker app hard-coded its AES key in the source code. A phys…6.1
• CVE-2022-38118OAKlouds Portal website’s Meeting Room has insufficient vali…8.8
• CVE-2022-38119UPSMON Pro login function has insufficient authentication. A…9.8
• CVE-2022-38120UPSMON PRO’s has a path traversal vulnerability. A remote at…6.5
• CVE-2022-38121UPSMON PRO configuration file stores user password in plaint…6.5
• CVE-2022-38122UPSMON PRO transmits sensitive data in cleartext over HTTP p…7.5
• CVE-2022-38123Improper Input Validation of plugin files in Administrator I…7.2
• CVE-2022-38124Debug tool in Secomea SiteManager allows logged-in administr…6.5
• CVE-2022-38125Improper Restriction of Communication Channel to Intended En…5.5