Process crash via out-of-bounds audio bit reads
Published Oct 31, 2022 · Updated Apr 15, 2025
Heap buffer over-read in Bento4 5e7bb34 allows remote attackers to crash mp42hls by supplying a crafted MP4 file. AP4_Mp4AudioDsiParser::ReadBits in Ap4Mp4AudioInfo.cpp reads past a five-byte decoder-specific buffer when ParseExtension requests bits beyond the available audio configuration. Processing attacker-supplied media is required; the public proof of concept demonstrates a process abort, while code execution is not established.
Summary
What happened
Heap buffer over-read in Bento4 5e7bb34 allows remote attackers to crash mp42hls by supplying a crafted MP4 file. AP4_Mp4AudioDsiParser::ReadBits in Ap4Mp4AudioInfo.cpp reads past a five-byte decoder-specific buffer when ParseExtension requests bits beyond the available audio configuration. Processing attacker-supplied media is required; the public proof of concept demonstrates a process abort, while code execution is not established.
The record
- CVE
- CVE-2022-3784
- Published
- Oct 31, 2022
- Updated
- Apr 15, 2025
- Vendor
- Axiomatic Systems LLC
- Product
- Bento4
- Classifications
- CWE-787, CWE-119, T1204.002
- Attack vector
- network
- Privileges
- unauthenticated
Timeline
How it unfolded
- Oct 31, 2022CVE publishedPublication date reported by the CVE source.
- Apr 15, 2025Record updatedLatest update available in the CVE record.
Exploitability
Present is not the same as exploitable
Compare your product and version with the public record. A matching version still requires validation against your environment.
Is a vulnerable build present?
Compare these published version ranges with your installed build and any vendor patches.
- Affected versionversion=5e7bb34
What conditions does exploitation require?
What is affected?
Attacks
What attackers are doing with it
Daily unique IPs observed by Shadowserver honeypots for known exploited vulnerabilities (KEVs). Missing observations do not establish an absence of attacks.
Weakness, pattern, technique
Public exploit references
- mp42hls ReadBits proof-of-concept fileproof of concept · demonstrated
Labels summarize the accepted research assessment. They do not indicate a test against your environment.
Technologies
Your stack
See the directory against your own environment.
Your stack
Check the software in your environment
Book a demo to see how Hinoki identifies affected software and validates exploitability in your environment.
Book a demo