CVE search · CVE-2022-24902
CVE-2022-24902
medium 4.3
TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.
Details
- Status
- Modified
- Published
- Last changed
- Source
- security-advisories@github.com
- Weakness
- CWE-400
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | low 2.9 | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L |
security-advisories@github.comSecondary |
| CVSS 3.1 | medium 4.3 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
nvd@nist.govPrimary |
| CVSS 2.0 | medium 4.3 | AV:N/AC:M/Au:N/C:N/I:N/A:P |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- python · tkvideoplayer
References
- https://github.com/PaulleDemon/tkVideoPlayer/issues/3Issue TrackingThird Party Advisory
- https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-hhmqThird Party Advisory
- https://github.com/PaulleDemon/tkVideoPlayer/issues/3Issue TrackingThird Party Advisory
- https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-hhmqThird Party Advisory