Security Vulnerabilities - CVEs Published In 2022
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBit function in mp4mux.
CVSS Score
8.8
EPSS Score
0.009
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4_AvcFrameParser::Feed function in mp4mux.
CVSS Score
6.5
EPSS Score
0.008
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a heap overflow via the AP4_BitReader::ReadBits function in mp4mux.
CVSS Score
8.8
EPSS Score
0.009
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_SttsAtom::Create function in mp42hls.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a segmentation violation via the AP4_Processor::ProcessFragments function in mp4decrypt.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_AtomFactory::CreateAtomFromStream function in mp4split.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a memory leak via the AP4_Processor::Process function in the mp4encrypt binary.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-03
nasm v2.16 was discovered to contain a stack overflow in the Ndisasm component
CVSS Score
5.5
EPSS Score
0.003
Published
2022-10-03
Bento4 v1.6.0-639 was discovered to contain a segmentation violation in the mp4fragment component.
CVSS Score
6.5
EPSS Score
0.007
Published
2022-10-03
The Donation Thermometer WordPress plugin before 2.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)
CVSS Score
4.8
EPSS Score
0.007
Published
2022-10-03