Medium
kodi-inputstream-adaptive — security advisory
A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212008.
- Products
- kodi-inputstream-adaptive
- Affected versions
- 19.0.0+ds1-1, 19.0.0+ds1-2, 2.6.14+ds1-1, 2.6.23+ds1-1, 20.3.11+ds-1, 20.3.17+ds-4, 20.3.18+ds-1, 20.3.18+ds-1build1, 21.5.16+ds-1, 21.5.9+ds-1
- Fixed versions
- Not specified
- CVEs
- CVE-2022-3668
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 00:42 UTC · Revision 1
Source evidence
A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212008.
osv:UBUNTU-CVE-2022-3668
kodi-inputstream-adaptive
Fixed versions: Not specified
kodi-inputstream-adaptive
Fixed versions: Not specified
kodi-inputstream-adaptive
Fixed versions: Not specified
kodi-inputstream-adaptive
Fixed versions: Not specified
kodi-inputstream-adaptive
Fixed versions: Not specified
Complete source record
{
"id": "32ba8fa9e17bdf13a76dd3f714cf957de6a6933ccc9b732a6758e46cba4da60e",
"url": "https://osv.dev/vulnerability/UBUNTU-CVE-2022-3668",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "UBUNTU-CVE-2022-3668",
"summary": "A vulnerability has been found in Axiomatic Bento4 and classified as problematic. This vulnerability affects the function AP4_AtomFactory::CreateAtomFromStream of the component mp4edit. The manipulation leads to memory leak. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-212008.",
"evidence": "osv:UBUNTU-CVE-2022-3668",
"products": [
{
"name": {
"value": "kodi-inputstream-adaptive",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "2.6.14+ds1-1",
"evidence": "/affected/0/versions"
},
{
"value": "2.6.23+ds1-1",
"evidence": "/affected/0/versions"
},
{
"value": "19.0.0+ds1-1",
"evidence": "/affected/0/versions"
},
{
"value": "19.0.0+ds1-2",
"evidence": "/affected/0/versions"
}
]
},
{
"name": {
"value": "kodi-inputstream-adaptive",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "20.3.11+ds-1",
"evidence": "/affected/1/versions"
},
{
"value": "20.3.17+ds-4",
"evidence": "/affected/1/versions"
},
{
"value": "20.3.18+ds-1",
"evidence": "/affected/1/versions"
},
{
"value": "20.3.18+ds-1build1",
"evidence": "/affected/1/versions"
}
]
},
{
"name": {
"value": "kodi-inputstream-adaptive",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "21.5.9+ds-1",
"evidence": "/affected/2/versions"
}
]
},
{
"name": {
"value": "kodi-inputstream-adaptive",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "21.5.16+ds-1",
"evidence": "/affected/3/versions"
}
]
},
{
"name": {
"value": "kodi-inputstream-adaptive",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [],
"affected_versions": [
{
"value": "21.5.9+ds-1",
"evidence": "/affected/4/versions"
},
{
"value": "21.5.16+ds-1",
"evidence": "/affected/4/versions"
}
]
}
],
"severity": "medium",
"structured": {
"id": "UBUNTU-CVE-2022-3668",
"aliases": [
"UBUNTU-CVE-2022-3668"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L"
},
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H"
},
{
"type": "Ubuntu",
"score": "medium"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "kodi-inputstream-adaptive",
"purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=jammy",
"ecosystem": "Ubuntu:22.04:LTS"
},
"versions": [
"2.6.14+ds1-1",
"2.6.23+ds1-1",
"19.0.0+ds1-1",
"19.0.0+ds1-2"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3668.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "kodi-inputstream-adaptive",
"binary_version": "19.0.0+ds1-2"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "kodi-inputstream-adaptive",
"purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=noble",
"ecosystem": "Ubuntu:24.04:LTS"
},
"versions": [
"20.3.11+ds-1",
"20.3.17+ds-4",
"20.3.18+ds-1",
"20.3.18+ds-1build1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3668.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "kodi-inputstream-adaptive",
"binary_version": "20.3.18+ds-1build1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "kodi-inputstream-adaptive",
"purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=questing",
"ecosystem": "Ubuntu:25.10"
},
"versions": [
"21.5.9+ds-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3668.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "kodi-inputstream-adaptive",
"binary_version": "21.5.9+ds-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "kodi-inputstream-adaptive",
"purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=stonking",
"ecosystem": "Ubuntu:26.10"
},
"versions": [
"21.5.16+ds-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3668.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "kodi-inputstream-adaptive",
"binary_version": "21.5.16+ds-1"
}
]
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
}
]
}
],
"package": {
"name": "kodi-inputstream-adaptive",
"purl": "pkg:deb/ubuntu/kodi-inputstream-adaptive?arch=source&distro=resolute",
"ecosystem": "Ubuntu:26.04:LTS"
},
"versions": [
"21.5.9+ds-1",
"21.5.16+ds-1"
],
"database_specific": {
"source": "https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2022/UBUNTU-CVE-2022-3668.json"
},
"ecosystem_specific": {
"binaries": [
{
"binary_name": "kodi-inputstream-adaptive",
"binary_version": "21.5.16+ds-1"
}
]
}
}
],
"modified": "2026-10-17T12:55:58.563757291Z",
"provider": "osv",
"upstream": [
"CVE-2022-3668"
],
"references": [
"https://ubuntu.com/security/CVE-2022-3668",
"https://www.cve.org/CVERecord?id=CVE-2022-3668"
]
},
"related_cves": [
{
"value": "CVE-2022-3668",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/1/score"
},
"source_id": "core-osv",
"document_id": 354418,
"published_at": "2022-10-26T19:15:00+00:00"
}