CVE-2022-3974

A vulnerability classified as critical was found in Axiomatic Bento4. Affected by this vulnerability is the function AP4_StdcFileByteStream::ReadPartial of the file Ap4StdCFileByteStream.cpp of the component mp4info. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213553 was assigned to this vulnerability.

• CWE-119
• CWE-787

• https://github.com/axiomatic-systems/Bento4/files/9987970/mp4info_overflow_ReadPartial341.zipThird Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/812Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.213553Third Party Advisory
• https://github.com/axiomatic-systems/Bento4/files/9987970/mp4info_overflow_ReadPartial341.zipThird Party Advisory
• https://github.com/axiomatic-systems/Bento4/issues/812Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.213553Third Party Advisory

Published

Nov 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-3968A vulnerability has been found in emlog and classified as pr…6.1
• CVE-2022-3969A vulnerability was found in OpenKM up to 6.3.11 and classif…5.5
• CVE-2022-3970A vulnerability was found in LibTIFF. It has been classified…8.8
• CVE-2022-3971A vulnerability was found in matrix-appservice-irc up to 0.3…5.6
• CVE-2022-3972A vulnerability was found in Pingkon HMS-PHP. It has been ra…9.8
• CVE-2022-3973A vulnerability classified as critical has been found in Pin…9.8
• CVE-2022-3975A vulnerability, which was classified as problematic, has be…6.1
• CVE-2022-3976A vulnerability has been found in MZ Automation libiec61850 …8.8
• CVE-2022-3977A use-after-free flaw was found in the Linux kernel MCTP (Ma…7.8
• CVE-2022-3978A vulnerability, which was classified as problematic, was fo…4.3
• CVE-2022-3979A vulnerability was found in NagVis up to 1.9.33 and classif…8.1
• CVE-2022-39799An attacker with no prior authentication could craft and sen…6.1