Skip to content
Heist/ feed
Back to feed
Medium

kodi-inputstream-adaptive — security advisory

Type: advisorySources: OSVAdvisory ID: UBUNTU-CVE-2022-3813

A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.

Products
kodi-inputstream-adaptive
Affected versions
19.0.0+ds1-1, 19.0.0+ds1-2, 2.6.14+ds1-1, 2.6.23+ds1-1, 20.3.11+ds-1, 20.3.17+ds-4, 20.3.18+ds-1, 20.3.18+ds-1build1, 21.5.16+ds-1, 21.5.9+ds-1
Fixed versions
Not specified
CVEs
CVE-2022-3813
Confirmed fixed CVEs
Not specified
Updated in this feed
31 Oct 2026, 00:42 UTC · Revision 1

Source evidence

UBUNTU-CVE-2022-3813

core-osv · Original source

Published 1 Nov 2022, 22:15 UTC

A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.

osv:UBUNTU-CVE-2022-3813

kodi-inputstream-adaptive

Fixed versions: Not specified

kodi-inputstream-adaptive

Fixed versions: Not specified

kodi-inputstream-adaptive

Fixed versions: Not specified

kodi-inputstream-adaptive

Fixed versions: Not specified

kodi-inputstream-adaptive

Fixed versions: Not specified

Complete source record
{
  "id": "53e406f12825fc4a0224dae0228134eb5d7b367e1adc80c185c27be3a4427f21",
  "url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-3813",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "UBUNTU-CVE-2022-3813",
    "summary": "A vulnerability classified as problematic has been found in Axiomatic Bento4. This affects an unknown part of the component mp4edit. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-212679.",
    "evidence": "osv:UBUNTU-CVE-2022-3813",
    "products": [
      {
        "name": {
          "value": "kodi-inputstream-adaptive",
          "evidence": "/affected/0/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "2.6.14+ds1-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "2.6.23+ds1-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "19.0.0+ds1-1",
            "evidence": "/affected/0/versions"
          },
          {
            "value": "19.0.0+ds1-2",
            "evidence": "/affected/0/versions"
          }
        ]
      },
      {
        "name": {
          "value": "kodi-inputstream-adaptive",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "20.3.11+ds-1",
            "evidence": "/affected/1/versions"
          },
          {
            "value": "20.3.17+ds-4",
            "evidence": "/affected/1/versions"
          },
          {
            "value": "20.3.18+ds-1",
            "evidence": "/affected/1/versions"
          },
          {
            "value": "20.3.18+ds-1build1",
            "evidence": "/affected/1/versions"
          }
        ]
      },
      {
        "name": {
          "value": "kodi-inputstream-adaptive",
          "evidence": "/affected/2/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "21.5.9+ds-1",
            "evidence": "/affected/2/versions"
          }
        ]
      },
      {
        "name": {
          "value": "kodi-inputstream-adaptive",
          "evidence": "/affected/3/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "21.5.16+ds-1",
            "evidence": "/affected/3/versions"
          }
        ]
      },
      {
        "name": {
          "value": "kodi-inputstream-adaptive",
          "evidence": "/affected/4/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": [
          {
            "value": "21.5.9+ds-1",
            "evidence": "/affected/4/versions"
          },
          {
            "value": "21.5.16+ds-1",
            "evidence": "/affected/4/versions"
          }
        ]
      }
    ],
    "severity": "medium",
    "structured": {
      "id": "UBUNTU-CVE-2022-3813",
      "aliases": [
        "UBUNTU-CVE-2022-3813"
      ],
      "metrics": [
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L"
        },
        {
          "type": "CVSS_V3",
          "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
        },
        {
          "type": "Ubuntu",
          "score": "medium"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "kodi-inputstream-adaptive",
            "purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=jammy",
            "ecosystem": "Ubuntu:22.04:LTS"
          },
          "versions": [
            "2.6.14+ds1-1",
            "2.6.23+ds1-1",
            "19.0.0+ds1-1",
            "19.0.0+ds1-2"
          ],
          "database_specific": {
            "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3813.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "kodi-inputstream-adaptive",
                "binary_version": "19.0.0+ds1-2"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "kodi-inputstream-adaptive",
            "purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=noble",
            "ecosystem": "Ubuntu:24.04:LTS"
          },
          "versions": [
            "20.3.11+ds-1",
            "20.3.17+ds-4",
            "20.3.18+ds-1",
            "20.3.18+ds-1build1"
          ],
          "database_specific": {
            "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3813.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "kodi-inputstream-adaptive",
                "binary_version": "20.3.18+ds-1build1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "kodi-inputstream-adaptive",
            "purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=questing",
            "ecosystem": "Ubuntu:25.10"
          },
          "versions": [
            "21.5.9+ds-1"
          ],
          "database_specific": {
            "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3813.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "kodi-inputstream-adaptive",
                "binary_version": "21.5.9+ds-1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "kodi-inputstream-adaptive",
            "purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=stonking",
            "ecosystem": "Ubuntu:26.10"
          },
          "versions": [
            "21.5.16+ds-1"
          ],
          "database_specific": {
            "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3813.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "kodi-inputstream-adaptive",
                "binary_version": "21.5.16+ds-1"
              }
            ]
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "0"
                }
              ]
            }
          ],
          "package": {
            "name": "kodi-inputstream-adaptive",
            "purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=resolute",
            "ecosystem": "Ubuntu:26.04:LTS"
          },
          "versions": [
            "21.5.9+ds-1",
            "21.5.16+ds-1"
          ],
          "database_specific": {
            "source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3813.json"
          },
          "ecosystem_specific": {
            "binaries": [
              {
                "binary_name": "kodi-inputstream-adaptive",
                "binary_version": "21.5.16+ds-1"
              }
            ]
          }
        }
      ],
      "modified": "2026-10-17T12:55:59.144855134Z",
      "provider": "osv",
      "upstream": [
        "CVE-2022-3813"
      ],
      "references": [
        "https://ubuntu.com/security/CVE-2022-3813",
        "https://www.cve.org/CVERecord?id=CVE-2022-3813"
      ]
    },
    "related_cves": [
      {
        "value": "CVE-2022-3813",
        "evidence": "/upstream"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/1/score"
  },
  "source_id": "core-osv",
  "document_id": 354446,
  "published_at": "2022-11-01T22:15:00+00:00"
}