CVE-2022-24902

low-risk

Published 2022-05-06

TkVideoplayer is a simple library to play video files in tkinter. Uncontrolled memory consumption in versions of TKVideoplayer prior to 2.0.0 can theoretically lead to performance degradation. There are no known workarounds. This issue has been patched and users are advised to upgrade to version 2.0.0 or later.

Do I need to act?

0.15% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 2.9/10 Low

LOCAL / HIGH complexity

Affected Products (1)

Tkvideoplayer

Affected Vendors

Python

References (4)

Issue Tracking https://github.com/PaulleDemon/tkVideoPlayer/issues/3

Third Party Advisory https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-...

Issue Tracking https://github.com/PaulleDemon/tkVideoPlayer/issues/3

Third Party Advisory https://github.com/PaulleDemon/tkVideoPlayer/security/advisories/GHSA-jmhj-vh4q-...

/ 100

low-risk

Severity 8/34 · Low

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal