5.5
CVE-2022-40885
- EPSS 0.24%
- Veröffentlicht 19.10.2022 18:15:13
- Zuletzt bearbeitet 09.05.2025 15:15:54
- CVE-Watchlists
- Unerledigt
Bento4 v1.6.0-639 has a memory allocation issue that can cause denial of service.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.24% | 0.154 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
| CISA-ADP | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
|
CWE-770 Allocation of Resources Without Limits or Throttling
The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.
https://github.com/axiomatic-systems/Bento4/issues/761
https://github.com/yangfar/CVE/blob/main/CVE-2022-40885.md