Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2022-41847: An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream, char const, AP4_FileByteStream::Mode, AP4_ByteStream*&) in System/StdC/Ap4S...

CVE-2022-41847 · published 4 years ago

Summary

An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStream::Mode, AP4_ByteStream*&) in System/StdC/Ap4StdCFileByteStream.cpp.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Ecosystem	Vendor	Product	Affected versions
–	axiosys	bento4	1.6.0-639 `cpe:2.3:a:axiosys:bento4:1.6.0-639:::::::*`
Ubuntu:22.04:LTS	canonical	kodi-inputstream-adaptive	All versions

Original advisory text

References

https://ubuntu.com/security/CVE-2022-41847 Third Party Advisory
https://www.cve.org/CVERecord?id=CVE-2022-41847 Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/775 Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/750 Third Party Advisory
https://github.com/axiomatic-systems/Bento4/issues/759 Third Party Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/41xxx/CVE-2022-41847... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-41847 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker partial control

Severity

5.5 Medium

Exploitation

<1% chance of attack within 30 days

Type

CWE-401Memory Leak

Timeline

Published30 Sep 2022

Updated4 Nov 2026

First seen29 Sep 2026

Sources

CVE-2022-41847 · NVD

UBUNTU-CVE-2022-41847 · OSV

CVE-2022-41847 · OSV

Track software like this

Free during beta

CVE-2022-41847: An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream*, char const*, AP4_FileByteStream::Mode, AP4_ByteStream*&) in System/StdC/Ap4S...

CVE-2022-41847: An issue was discovered in Bento4 1.6.0-639. A memory leak exists in AP4_StdcFileByteStream::Create(AP4_FileByteStream, char const, AP4_FileByteStream::Mode, AP4_ByteStream*&) in System/StdC/Ap4S...