CVE-2022-3817

A vulnerability has been found in Axiomatic Bento4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component mp4mux. The manipulation leads to memory leak. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212683.

• CWE-404

• https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zipExploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/792Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.212683Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/files/9727057/POC_mp4mux_1729452038.zipExploit, Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/792Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.212683Third Party Advisory

Published

Nov 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-38163A Drag and Drop spoof vulnerability was discovered in F-Secu…3.5
• CVE-2022-38164A vulnerability affecting F-Secure SAFE browser for Android …6.5
• CVE-2022-38165Arbitrary file write in F-Secure Policy Manager through 2022…9.8
• CVE-2022-38166In F-Secure Endpoint Protection for Windows and macOS before…7.5
• CVE-2022-38167The Nintex Workflow plugin 5.2.2.30 for SharePoint allows XS…6.1
• CVE-2022-38168Broken Access Control in User Authentication in Avaya Scopia…9.1
• CVE-2022-38170In Apache Airflow prior to 2.3.4, an insecure umask was conf…4.7
• CVE-2022-38171Xpdf prior to version 4.04 contains an integer overflow in t…7.8
• CVE-2022-38172ServiceNow through San Diego Patch 3 allows XSS via the name…6.1
• CVE-2022-38176An issue was discovered in YSoft SAFEQ 6 before 6.0.72. Inco…7.8
• CVE-2022-38177By spoofing the target resolver with responses that have a m…7.5
• CVE-2022-38178By spoofing the target resolver with responses that have a m…7.5