CVE-2022-24902

Description

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.

Risk Information

Base Score

4.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS Score

Exploitation Probability

0.149

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2022-24902 are fixed in Python-tkvideoplayer 2.0.0	Windows
Vulnerabilities CVE-2022-24902 are fixed in Python-tkvideoplayer for linux 2.0.0	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234